Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2017-9267

eDirectory LDAP peer certificate validation issue

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microfocus

Description

In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND operations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Novell eDirectory

  • unspecified to < 9.0.3.1affected

References