The installation functionality in the Novell Kanaka component before 2.8 for Novell Open Enterprise Server (OES) on Mac OS X does not verify the server's X.509 certificate during an SSL session,. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable. No vendor patch available.
Information Disclosure
Kanaka
NVD
CVSS 2.0
5.8
EPSS
0.1%
IBM Scale Out Network Attached Storage (SONAS) 1.3 before 1.3.2.3 requires cleartext storage of LDAP credentials without recommending a less privileged LDAP account, which might allow attackers to. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. No vendor patch available.
IBM
Authentication Bypass
Scale Out Network Attached Storage
NVD
CVSS 2.0
3.5
EPSS
0.2%