Vulnerabilities > CVE-2010-3264 - Credentials Management vulnerability in Novell Identity Manager 3.6.1

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
local
low complexity
novell
CWE-255

Summary

The engine installer in Novell Identity Manager (aka IDM) 3.6.1 stores admin tree credentials in /tmp/idmInstall.log, which allows local users to obtain sensitive information by reading this file.

Vulnerable Configurations

Part Description Count
Application
Novell
1

Common Weakness Enumeration (CWE)