CVE-2016-9167

CWE-2643 documents3 sources
Severity
7.5HIGH
EPSS
0.5%
top 34.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 23
Latest updateMay 17

Description

NDSD in Novell eDirectory before 9.0.2 did not calculate ACLs on LDAP objects across partition boundaries correctly, which could lead to a privilege escalation by modifying user attributes that would otherwise be filtered by an ACL.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

CVEListV5novell_edirectoryNovell eDirectory

🔴Vulnerability Details

2
GHSA
GHSA-wqm7-3p5m-h5g8: NDSD in Novell eDirectory before 92022-05-17
CVEList
CVE-2016-9167: NDSD in Novell eDirectory before 92017-03-23
CVE-2016-9167 (HIGH CVSS 7.5) | NDSD in Novell eDirectory before 9. | cvebase.io