CVE-2009-4879: Novell Access Manager

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions.

Affected products

• Novell Access Manager: up to and including 3.1; version 3 only

Published 2010-05-26. Last modified 2026-06-16.