medium5.4
CVE-2017-9285
NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services.
Impact
NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microfocus | Edirectory | through 9.0 |
| Netiq | Edirectory | Version 9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.suse.com/show_bug.cgi?id=1029077
- https://www.netiq.com/documentation/edirectory-9/edirectory904_releasenotes/data/edirectory904_releasenotes.html
- https://www.novell.com/support/kb/doc.php?id=7016794
- https://bugzilla.suse.com/show_bug.cgi?id=1029077
- https://www.netiq.com/documentation/edirectory-9/edirectory904_releasenotes/data/edirectory904_releasenotes.html
- https://www.novell.com/support/kb/doc.php?id=7016794