Novell iManager < 2.7 SP1 Property Book Pages Security Bypass

Medium Nessus Network Monitor Plugin ID 4618

Synopsis

The remote web server is affected by a security bypass vulnerability.

Description

Novell iManager is installed on the remote host. The version of iManager installed reportedly fails to implement sufficient access control checks on 'Property Book Pages' created with Plug-in Studio before granting delete privileges on them to a user.

Solution

Upgrade to version 2.7 SP1 (iManager 2.7.1) or higher.

See Also

http://www.nessus.org/u?225c9e63

Plugin Details

Severity: Medium

ID: 4618

File Name: 4618.prm

Family: CGI

Published: 2008/08/06

Modified: 2016/01/21

Dependencies: 4616

Nessus ID: 33867

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 5.1

Temporal Score: 5

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSSv3

Base Score: 5.6

Temporal Score: 4.9

Vector: CVSS3#AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS3#E:U/RL:O/RC:C

Reference Information

CVE: CVE-2008-3488

BID: 30497