CVE-2011-5028

MEDIUM 4.0CVE-2011-5028 · Published 29/12/2011 · updated 16/06/2026

In short

CVE-2011-5028 is a MEDIUM (CVSS 4.0) vulnerability affecting sentinel log manager (novell).
Chance of exploitation in the next 30 days (EPSS): 3.2%, higher than 88.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sentinel log manager novell	`≤ 1.2.0.1_938`	No fix yet

Description

Directory traversal vulnerability in novelllogmanager/FileDownload in Novell Sentinel Log Manager 1.2.0.1_938 and earlier, as used in Novell Sentinel before 7.0.1.0, allows remote authenticated users to read arbitrary files via a .. (dot dot) in the filename parameter.

References

archives.neohapsis.com/archives/fulldisclosure/2011-12/0368.html
osvdb.org/77948
secunia.com/advisories/47258 · Vendor Advisory
secunia.com/advisories/48760
support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5138757.html
securitytracker.com/id
exchange.xforce.ibmcloud.com/vulnerabilities/71861

More vulnerabilities in sentinel log manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free