Detections
Analytics

Novell iManager < 2.7 SP1 Property Book Pages Security Bypass

medium Nessus Network Monitor Plugin ID 4618

Synopsis

The remote web server is affected by a security bypass vulnerability.

Description

Novell iManager is installed on the remote host. The version of iManager installed reportedly fails to implement sufficient access control checks on 'Property Book Pages' created with Plug-in Studio before granting delete privileges on them to a user.

Solution

Upgrade to version 2.7 SP1 (iManager 2.7.1) or higher.

See Also

http://www.nessus.org/u?225c9e63

Plugin Details

Severity: Medium

ID: 4618

Family: CGI

Published: 8/6/2008

Updated: 3/6/2019

Nessus ID: 33867

Risk Information

VPR

Risk Factor: Medium

Score: 5.8

CVSS v2

Risk Factor: Medium

Base Score: 5.1

Temporal Score: 3.8

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: Medium

Base Score: 5.6

Temporal Score: 4.9

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:novell:imanager

Reference Information

CVE: CVE-2008-3488

BID: 30497