What’s Vulnerable › Vulnerabilities

CVE-2009-4879

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2010-05-26 · updated 2026-06-16
• Weakness: CWE-287

Description

The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions.

Affected products

• Novell Access Manager: through 3.1; 3

References

• http://www.novell.com/documentation/novellaccessmanager31/accessmanager_readme/data/accessmanager_readme.html
• http://www.securitytracker.com/id?1022581
• http://www.novell.com/documentation/novellaccessmanager31/accessmanager_readme/data/accessmanager_readme.html
• http://www.securitytracker.com/id?1022581

Get alerted when CVE-2009-4879 or the next vulnerability affects your stack