CVE-2007-1309: Novell Access Manager

High severity, CVSS 9.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then manually modifying policy.txt.

Affected products

• Novell Access Manager: version 3 only

Published 2007-03-07. Last modified 2026-06-16.