Data Retention Policy Vulnerability in Novell Sentinel Log Manager

CVE-2012-6534

Summary

The vulnerability in Novell Sentinel Log Manager allows remote attackers to exploit improper access control. By sending a specially crafted request to the datastore service, attackers can create malicious data retention policies. Additionally, authenticated Report Administrators can be manipulated to create unintentional policies through the 'Save As Retention Policy' feature during search results actions. This vulnerability poses risks to data integrity and security as it enables unauthorized modifications to data retention strategies.

References