Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/x-gwt-rpc request to novelllogmanager/datastorageservice.rpc, and allows remote authenticated Report Administrators to create data retention policies via a search-results Save Query As Save As Retention Policy action.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sentinel_log_manager | Novell | * | 1.2.0.2 |
| Sentinel_log_manager | Novell | 1.0.0.5 | 1.0.0.5 |
| Sentinel_log_manager | Novell | 1.1.0.1 | 1.1.0.1 |
| Sentinel_log_manager | Novell | 1.2 | 1.2 |
| Sentinel_log_manager | Novell | 1.0.0.4 | 1.0.0.4 |
| Sentinel_log_manager | Novell | 1.2.0.1 | 1.2.0.1 |
| Sentinel_log_manager | Novell | 1.1.0.2 | 1.1.0.2 |
| Sentinel_log_manager | Novell | 1.1.0.0 | 1.1.0.0 |