CVE-2017-9267 eDirectory LDAP peer certificate validation issue
HighCVSS 7.5
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND operations.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell edirectory | < 9.0.3.1 | 9.0.3.1 |