Total vulnerabilities in the database
The RPC implementation in the server in Novell Cloud Manager 1.1.2 before Patch 3 does not properly initialize objects, which allows remote attackers to execute arbitrary code by making RPC calls that leverage incorrect privileges associated with a partially initialized session.
| Software | From | Fixed in |
|---|---|---|
| novell / cloud_manager | 1.1.2-patch1 | 1.1.2-patch1.x |
| novell / cloud_manager | 1.1.2 | 1.1.2.x |
| novell / cloud_manager | - | 1.1.2.x |