Skip to content
OpenAdvisories
Medium · 6.5 CVE-2017-9267 EUVD-2017-18203GHSA-jh86-48fp-8v6j

eDirectory LDAP peer certificate validation issue

Published Mar 2, 2018 · Updated Sep 16, 2024 · Assigned by microfocus

Description

In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND operations.

Affected products

VendorProductAffectedFixed
Novell eDirectory unspecified – < 9.0.3.1 9.0.3.1

References