Description
nds/files/opt/novell/eDirectory/lib64/ndsimon/public/images in iMonitor in Novell eDirectory before 8.8 SP8 Patch 4 allows remote authenticated users to obtain sensitive information from process memory via a direct request.
Metrics
CVSS 2.0 4.0/10
AV:N/AC:L/Au:S/C:P/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://www.securityfocus.com/archive/1/534284
- http://www.securitytracker.com/id/1031408
- https://bugzilla.novell.com/show_bug.cgi?id=904135
- https://www.novell.com/support/kb/doc.php?id=3426981Vendor Advisory
- https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20141219-0_NetIQ_eDirectory_iMonitor_XSS_Memory_Disclosure_v10.txtExploit
- http://www.securityfocus.com/archive/1/534284
- http://www.securitytracker.com/id/1031408
- https://bugzilla.novell.com/show_bug.cgi?id=904135
- https://www.novell.com/support/kb/doc.php?id=3426981Vendor Advisory
- https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20141219-0_NetIQ_eDirectory_iMonitor_XSS_Memory_Disclosure_v10.txtExploit
Timeline
- Published
- Dec 19, 2014
- Last modified
- Jun 17, 2026
- NVD status
- Modified