CVE-2007-1309
Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN...
Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then manually modifying policy.txt.
Exploit likelihood
What each source reports
NVD Score used
Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then manually modifying policy.txt.
- Record
CVE-2007-1309- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then manually modifying policy.txt.
- Record
CVE-2007-1309- Updated
- 2026-11-02
EUVDEUVD-2007-1306 No score
Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then manually modifying policy.txt.
- Record
EUVD-2007-1306- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gwf5-4jv2-9667 No score
Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN...
Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then manually modifying policy.txt.
- Record
GHSA-gwf5-4jv2-9667- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1309 is a high vulnerability (CVSS 9.0) in Novell Access Manager, published March 7, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.92%, the 80th percentile. No source names a fixed version.