CVE-2016-9167
—CVSS 3.0
7.5 high
EPSS
1%p67
Published
()
Modified
Description
NDSD in Novell eDirectory before 9.0.2 did not calculate ACLs on LDAP objects across partition boundaries correctly, which could lead to a privilege escalation by modifying user attributes that would otherwise be filtered by an ACL.
- Vendors
- novell
- Products
- edirectory
- Weakness
- CWE-264
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
In the news0 stories
No ingested article mentions this CVE yet.