CVE-2007-4526: Netiq Identity Manager

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The Client Login Extension (CLE) in Novell Identity Manager before 3.5.1 20070730 stores the username and password in a local file, which allows local users to obtain sensitive information by reading this file.

Affected products

• Netiq Identity Manager: up to and including 3.5
• Novell Client Login Extension (cle): any version

Published 2007-08-25. Last modified 2026-06-16.