Description
A security vulnerability in cookie handling in the http stack implementation in NDSD in Novell eDirectory before 9.0.1 allows remote attackers to bypass intended access restrictions by leveraging predictable cookies.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://www.novell.com/support/kb/doc.php?id=7016794
Scores
CVSS v3
7.5
EPSS
0.0033
EPSS Percentile
55.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-284
Status
published
Products (2)
n/a/Novell eDirectory
Novell eDirectory
novell/edirectory
< 9.0
Published
Mar 23, 2017
Tracked Since
Feb 18, 2026