CVE-2012-6534: Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a...

Security readout for executives and security teams

This flaw affects Novell Sentinel Log Manager before 1.2.0.3. An attacker could create data retention policies, potentially changing how log data is retained. For organizations relying on this system for audit, compliance, or investigations, unauthorized policy creation could undermine evidence preservation. The source bundle provides no CVSS score or confirmed active exploitation. Exposure is limited to organizations still running Novell Sentinel Log Manager before 1.2.0.3, especially where the web interface or datastorageservice.rpc endpoint is reachable by untrusted networks or broad internal users. Prioritize remediation if the product remains in use for compliance, audit, or incident investigation. The vulnerability is old, but legacy logging systems often persist and unauthorized retention policy changes can weaken evidence integrity. Mitigation focus: Upgrade Novell Sentinel Log Manager to 1.2.0.3 or later if still deployed.; Review vendor release notes and support guidance for the exact fixed build.; Restrict access to the Log Manager web interface from untrusted networks..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.