5.4
Medium
CVE-2017-9285 NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted…
Description
NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| eDirectory | Versions not published |
Other CVEs of eDirectory
The 4 CVEs of eDirectory →
CVE-2018-12461
Fixed issues with NetIQ eDirectory prior to 9.1.1 when checking certificate revocation
3.5
Low
CVE-2018-1346
Addresses denial of service attack to eDirectory versions prior to 9.1
3.1
Low
CVE-2017-7429
The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP…
8.8
High