Skip to content
OpenAdvisories

Vendor

Novell

2 known vulnerabilities.

Products

eDirectory 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.2
    CVE-2017-9277

    existing connection is being used even though eDirectory LDAP server is upgraded to EBA

    The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA (Enhanced Background Authentication) kept open connections without EBA.

    Novell eDirectory
  • Medium 6.5
    CVE-2017-9267

    eDirectory LDAP peer certificate validation issue

    In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND operations.

    Novell eDirectory