CVE-2011-5028: Path Traversal
Directory traversal vulnerability in novelllogmanager/FileDownload in Novell Sentinel Log Manager 1.2.0.1938 and earlier, as used in Novell Sentinel before 7.0.1.0, allows remote authenticated users to read arbitrary files via a .. (dot dot) in the filename parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-5028?
CVE-2011-5028 has been categorized as a medium severity vulnerability due to its potential to allow unauthorized file access.
How do I fix CVE-2011-5028?
To fix CVE-2011-5028, upgrade Novell Sentinel Log Manager to version 7.0.1.0 or later to eliminate the directory traversal vulnerability.
Who is affected by CVE-2011-5028?
CVE-2011-5028 affects users of Novell Sentinel Log Manager version 1.2.0.1_938 and earlier.
What type of vulnerability is CVE-2011-5028?
CVE-2011-5028 is categorized as a directory traversal vulnerability that allows reading of arbitrary files.
Can CVE-2011-5028 be exploited remotely?
Yes, CVE-2011-5028 can be exploited remotely by authenticated users to access sensitive files.