Description
The Client Login Extension (CLE) in Novell Identity Manager before 3.5.1 20070730 stores the username and password in a local file, which allows local users to obtain sensitive information by reading this file.
References
- https://secure-support.novell.com/KanisaPlatform/Publishing/177/3329402_f.SAL_Public.html
- ADV-2007-2957 vdb-entry
- 37320 vdb-entry
- 1018602 vdb-entry
- 25420 vdb-entry
- 26555 third-party-advisory
- novell-identity-login-information-disclosure(36215) vdb-entry