Upstream information
Description
Novell iManager 2.7 before SP6 Patch 1 does not refresh a token after a logout action, which has unspecified impact and remote attack vectors.SUSE information
Overall state of this security issue: Does not affect SUSE products
This issue is currently rated as having critical severity.
| CVSS detail | National Vulnerability Database |
|---|---|
| Base Score | 10 |
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| Access Vector | Network |
| Access Complexity | Low |
| Authentication | None |
| Confidentiality Impact | Complete |
| Integrity Impact | Complete |
| Availability Impact | Complete |
SUSE Security Advisories:
- TID7010166, published Sat Mar 3 09:46:04 UTC 2018
SUSE Timeline for this CVE
CVE page created: Fri Jun 28 13:34:21 2013CVE page last modified: Mon Oct 6 18:19:17 2025