Security Update for Novell Identity Manager 3.5 iManager Plugins

This information is for customers using Identity Manager 3.5 from the product media whose CRC numbers match those stated below. It does not affect any previous versions of Identity Manager. It does not affect the Bundle Edition. And it does not affect product downloaded after April 18, 2007.

A fix has been made to an iManager plug-in to disallow the display of hidden attributes that have been synchronized by Identity Manager drivers. Since drivers often synchronize sensitive information, administrative rights to these drivers should be limited to prevent unauthorized access. Novell recommends that all customers follow the security guidelines outlined in section 8 of the Identity Manager 3.5 Administration Guide.

If you are affected, or if you believe you may have the wrong plug-ins for Identity Manager 3.5, you should replace those plug-ins by downloading the latest IDM plugins from https://download.novell.com/patch/finder/ .

The CRC's of the original affected media are: