Vulnerability Description
The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions.
CVSS Score
4.3
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell | Access Manager | <= 3.1 |
Related Weaknesses (CWE)
References
- http://www.novell.com/documentation/novellaccessmanager31/accessmanager_readme/d
- http://www.securitytracker.com/id?1022581
- http://www.novell.com/documentation/novellaccessmanager31/accessmanager_readme/d
- http://www.securitytracker.com/id?1022581
FAQ
What is CVE-2009-4879?
CVE-2009-4879 is a vulnerability with a CVSS score of 4.3 (MEDIUM). The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrict...
How severe is CVE-2009-4879?
CVE-2009-4879 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-4879?
Check the references section above for vendor advisories and patch information. Affected products include: Novell Access Manager.