CVE-2018-1346 NetIQ eDirectory Denial of Service

Addresses denial of service attack to eDirectory versions prior to 9.1...

Micro Focus NetIQ eDirectory PKI Plugin Design Vulnerability

Micro Focus NetIQ eDirectory is an identity management infrastructure platform that combines identity management architecture and directory services technology from Micro Focus, UK. The platform provides authentication policies, data backup and recovery services, data disaster recovery, etc. PKI...

Micro Focus Novell eDirectory Password Restriction Vulnerability

Micro Focus Novell eDirectory is an identity management infrastructure platform that combines identity management architecture and directory services technology from Micro Focus, UK. The platform provides authentication policies, data backup and recovery services, and data disaster recovery. A...

Micro Focus NetIQ eDirectory Login Restriction Vulnerability

Micro Focus NetIQ eDirectory is an identity management infrastructure platform from Micro Focus UK that combines identity management architecture and directory services technology. The platform provides authentication policies, data backup and recovery services, and data disaster recovery. A...

CVE-2017-9285

NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services...

CVE-2017-9285

NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services...

CVE-2017-7429

The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server...

CVE-2017-7429

The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server...

CVE-2017-9277

The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA Enhanced Background Authentication kept open connections without EBA...

Design/Logic Flaw

The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server...

CVE-2017-9277

The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA Enhanced Background Authentication kept open connections without EBA...

Authentication flaw

The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA Enhanced Background Authentication kept open connections without EBA...

Design/Logic Flaw

In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND operations...

Design/Logic Flaw

NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services...

CVE-2017-9267

In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND operations...

CVE-2017-9267

In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND operations...

CVE-2017-7429

The CVE concerns NetIQ eDirectory PKI plugin prior to 8.8.8 Patch 10 Hotfix 1, where the certificate upload function can be abused to upload JSP code. This allows an authenticated attacker to execute JSP applets on the iManager server. Affected product: Micro Focus NetIQ eDirectory PKI plugin (ve...

CVE-2017-9285

NetIQ eDirectory is affected on versions before 9.0 SP4 where the ebaclient login path did not enforce login restrictions, enabling unpermitted access to eDirectory services. Root cause: inadequate enforcement of authentication when ebaclient is used. Impact: potential exposure of confidential da...

CVE-2017-9267

CVE-2017-9267 affects Micro Focus/Novell eDirectory before 9.0.3.1, where the LDAP interface does not enforce cipher restrictions, allowing weaker ciphers to be used during SSL BIND. CNVD-2018-06606 confirms the issue stems from password restrictions in the LDAP interface and notes the vulnerable...

CVE-2017-9267 eDirectory LDAP peer certificate validation issue

In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND operations...