CVE-2017-9277 MEDIUM

CVE-2017-9277: existing connection is being used even though eDirectory LDAP server is upgraded to EBA

Vendor Novell
Product eDirectory
Published March 2, 2018
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

4.2/10
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA (Enhanced Background Authentication) kept open connections without EBA.

Key dates

02Disclosure timeline

March 2, 2018 CVE published
September 17, 2024 Record updated