CVE-2012-6534 Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/x-gwt-rpc request to novelllogmanager/datastorageservice.rpc, and allows remote....
MediumCVSS 4.3
EPSS 4.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/x-gwt-rpc request to novelllogmanager/datastorageservice.rpc, and allows remote authenticated Report Administrators to create data retention policies via a search-results "Save Query As" "Save As Retention Policy" action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell sentinel log manager | <= 1.2.0.2 | No fix listed |
| novell sentinel log manager | = 1.0.0.4 | No fix listed |
| novell sentinel log manager | = 1.0.0.5 | No fix listed |
| novell sentinel log manager | = 1.1.0.0 | No fix listed |
| novell sentinel log manager | = 1.1.0.1 | No fix listed |
| novell sentinel log manager | = 1.1.0.2 | No fix listed |
| novell sentinel log manager | = 1.2 | No fix listed |
| novell sentinel log manager | = 1.2.0.1 | No fix listed |