|
|
Info |
Last Modified |
| 10 months ago |
|
|
|
|
Description |
eDirectory NMAS (Novell Modular Authentication Service) contains a flaw in the Fogotten Password portal that may lead to an unauthorized password modification. It is possible to modify an arbitrary user's password without answering the challenge question(s), which may lead to a loss of integrity.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Authentication Management
Impact:
Loss of Integrity
Exploit:
Exploit Unknown
Disclosure:
OSVDB Verified
|
|
Solution |
Upgrade to version 2.3.8 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
|
|
Products |
|
eDirectory NMAS
 |
2.3.7 |
2.3.6 |
|
|
|
|
Credit |
Unknown or Incomplete
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
