CVE-2017-9267 MEDIUM

CVE-2017-9267: eDirectory LDAP peer certificate validation issue

Vendor Novell

Product eDirectory

Weakness CWE-757

Published March 2, 2018

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

6.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND operations.

Key dates

02Disclosure timeline

March 2, 2018 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-9267 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/757.html

Related vulnerabilities

CVE-2017-9267: eDirectory LDAP peer certificate validation issue

01Description

02Disclosure timeline

03References

04Related CVE