← Database

CVE-2009-4879

MEDIUM CVSS: 4.3 Published: 2010-05-26 Modified: 2026-06-16

Description

The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions.

Affected Platforms

Novell Access Manager

Weakness Type

CWE-287

References