CVE-2012-6534

Novell Sentinel Log Manager < 1.2.0.3 - Unauthenticated Data Retention Policy Creation via RPC Request

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-6534. PoCs published by Piotr Chmylkowski.

AI-analyzed exploit summary This exploit leverages an unauthenticated RPC endpoint in Novell Sentinel Log Manager to create arbitrary retention policies. It sends a crafted HTTP POST request with a serialized payload to the vulnerable endpoint, demonstrating an authentication bypass vulnerability.

Description

Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/x-gwt-rpc request to novelllogmanager/datastorageservice.rpc, and allows remote authenticated Report Administrators to create data retention policies via a search-results "Save Query As" "Save As Retention Policy" action.

Exploits (1)

exploitdb WORKING POC
by Piotr Chmylkowski · textwebappswindows
https://www.exploit-db.com/exploits/21744

This exploit leverages an unauthenticated RPC endpoint in Novell Sentinel Log Manager to create arbitrary retention policies. It sends a crafted HTTP POST request with a serialized payload to the vulnerable endpoint, demonstrating an authentication bypass vulnerability.

Classification
Working Poc 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: Novell Sentinel Log Manager <=1.2.0.2
No auth needed
Prerequisites: Network access to the target · Open port 8443 on the target
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Exploit mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2012/Oct/25
Issue Tracking x_refsource_confirm
https://bugzilla.novell.com/show_bug.cgi?id=771634
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/21744/

Scores

EPSS 0.0449
EPSS Percentile 90.3%

Details

CWE
CWE-264
Status published
Products (8)
novell/sentinel_log_manager 1.0.0.4
novell/sentinel_log_manager 1.0.0.5
novell/sentinel_log_manager 1.1.0.0
novell/sentinel_log_manager 1.1.0.1
novell/sentinel_log_manager 1.1.0.2
novell/sentinel_log_manager 1.2
novell/sentinel_log_manager 1.2.0.1
novell/sentinel_log_manager < 1.2.0.2
Published Mar 29, 2013
Tracked Since Feb 18, 2026