Vulnerability Details CVE-2017-9267
In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND operations.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.6%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 5.0
References
Products affected by CVE-2017-9267
-
cpe:2.3:a:novell:edirectory:-
-
cpe:2.3:a:novell:edirectory:8.0
-
cpe:2.3:a:novell:edirectory:8.5
-
cpe:2.3:a:novell:edirectory:8.5.12a
-
cpe:2.3:a:novell:edirectory:8.5.27
-
cpe:2.3:a:novell:edirectory:8.6.2
-
cpe:2.3:a:novell:edirectory:8.7
-
cpe:2.3:a:novell:edirectory:8.7.1
-
cpe:2.3:a:novell:edirectory:8.7.3
-
cpe:2.3:a:novell:edirectory:8.7.3.10
-
cpe:2.3:a:novell:edirectory:8.7.3.8
-
cpe:2.3:a:novell:edirectory:8.8
-
cpe:2.3:a:novell:edirectory:8.8.1
-
cpe:2.3:a:novell:edirectory:8.8.3