Vulnerabilities > CVE-2007-4526 - Credentials Management vulnerability in multiple products

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
local
low complexity
netiq
novell
CWE-255
NVD
Published: 2007-08-25
Updated: 2018-09-27

Summary

The Client Login Extension (CLE) in Novell Identity Manager before 3.5.1 20070730 stores the username and password in a local file, which allows local users to obtain sensitive information by reading this file.

Vulnerable Configurations

Part Description Count
Application
Netiq
1
Application
Novell
1

Common Weakness Enumeration (CWE)

References