Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administration Console (aka Access Management Console) in Novell Access Manager 3.1 before 3.1.2-281 on Windows allows remote attackers to create arbitrary files with any contents, and consequently execute arbitrary code, via a .. (dot dot) in a parameter, aka ZDI-CAN-678.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Novell Access Manager管理控制台getEntry()方式任意文件上传漏洞
Vulnerability Description
Novell Access Manager是新一代的访问管理解决方案。 Novell Access Manager管理控制台的PortalModuleInstallManager组件中存在任意文件上传漏洞。在nps.jar的servlet中，由于没有正确地对参数过滤“../”目录遍历串，攻击者可以指定任意文件名对其上传任意内容。成功攻击可以导致以服务的权限执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A