CVE-2016-5747

Published: Mar 23, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A security vulnerability in cookie handling in the http stack implementation in NDSD in Novell eDirectory before 9.0.1 allows remote attackers to bypass intended access restrictions by leveraging predictable cookies.

Affected (1)

Products: Novell: Edirectory

Novell

1 product

Edirectory

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Novell Edirectory	Up to 9.0

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://www.novell.com/support/kb/doc.php?id=7016794

Source: security@opentext.com

https://www.novell.com/support/kb/doc.php?id=7016794

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.