Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2010-05-26	CVE-2009-4879	Improper Authentication vulnerability in Novell Access Manager 3 The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions. network novell CWE-287	4.3
2010-05-26	CVE-2009-4878	Information Disclosure vulnerability in Novell Access Manager 3 Unspecified vulnerability in the Administration Console in Novell Access Manager before 3.1 SP1 allows attackers to access system files via unknown attack vectors. network novell	4.3