PT-2018-8504 · Netiq · Netiq Edirectory

Publicado 2018-03-02 · Atualizado 2021-04-13 · CVE-2017-9285

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NetIQ eDirectory versions prior to 9.0 SP4

Description The issue allows unpermitted access to eDirectory services due to a lack of login restriction enforcement when using ebaclient.

Recommendations For versions prior to 9.0 SP4, update to version 9.0 SP4 or later to resolve the issue.

Correção

Improper Access Control

Improper Authentication

Enumeração de Fraquezas

CWE-284

CWE-287

Identificadores relacionados

CVE-2017-9285

Produtos afetados

Netiq Edirectory

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-9285 · Nota de Segurança
• https://netiq.com/documentation/edirectory-9/edirectory904_releasenotes/data/edirectory904_releasenotes.html · Nota
• https://bugzilla.suse.com/show_bug.cgi?id=1029077 · Nota
• https://novell.com/support/kb/doc.php?id=7016794 · Nota
• https://osv.dev/vulnerability/CVE-2017-9285 · Aviso do Fabricante