← back
CVE-2012-6534

CVE-2012-6534

EPSS 4.5%
Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/x-gwt-rpc request to novelllogmanager/datastorageservice.rpc, and allows remote authenticated Report Administrators to create data retention policies via a search-results "Save Query As" "Save As Retention Policy" action.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/21744/unverifiedexploitdbwww.exploit-db.com/exploits/21744unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://bugzilla.novell.com/show_bug.cgi?id=771634http://seclists.org/fulldisclosure/2012/Oct/25http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5150932.htmlhttps://www.exploit-db.com/exploits/21744/https://www.netiq.com/documentation/novelllogmanager12/readme/data/log_manager1203_readme.html