The Client Login Extension (CLE) in Novell Identity Manager before 3.5.1 20070730 stores the username and password in a local file, which allows local users to obtain sensitive information by reading this file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Identity_manager | Netiq | * | 3.5 (including) |
| Client_login_extension_(cle) | Novell | * | * |