CVE-2017-9285

NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services...

CVE-2017-9285 Login restrictions not applied when using ebaclient against NetIQ eDirectory EBA interface

NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services...

CVE-2017-9285

NetIQ eDirectory is affected on versions before 9.0 SP4 where the ebaclient login path did not enforce login restrictions, enabling unpermitted access to eDirectory services. Root cause: inadequate enforcement of authentication when ebaclient is used. Impact: potential exposure of confidential da...