Description
The engine installer in Novell Identity Manager (aka IDM) 3.6.1 stores admin tree credentials in /tmp/idmInstall.log, which allows local users to obtain sensitive information by reading this file.
References
- http://www.novell.com/support/viewContent.do?externalId=7006705
- 41194 third-party-advisory
- ADV-2010-2226 vdb-entry