Medium · 5.4 CVE-2017-9285 EUVD-2017-18221GHSA-659h-cg37-9c4x

Login restrictions not applied when using ebaclient against NetIQ eDirectory EBA interface

Published Mar 2, 2018 · Updated Sep 17, 2024 · Assigned by microfocus

Description

NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services.

Vendor	Product	Affected	Fixed
NetIQ	eDirectory	unspecified – < 9.0 SP4	9.0 SP4