CVE-2017-9267 - CVE House
Back to Database
Status published Medium CVE-2017-9267

eDirectory LDAP peer certificate validation issue

Vulnerability Description

In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND operations.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-9267

Credits & Attribution

No credits recorded in the NVD database.

References

More from Novell

View All →
CVE-2017-9277
existing connection is being used even though eDirectory LDAP server is upgraded to EBA
Medium 4.2

Affected Vendor

Affected Software

eDirectory
Vulnerable Versions:
unspecified

Timeline

Official Publish: March 2nd, 2018
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weaknesses (CWE)

CWE-757

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.