CVEvulnerability

CVE-2016-5747

7.5 HIGH Published 2017-03-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-03-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-284

Description

A security vulnerability in cookie handling in the http stack implementation in NDSD in Novell eDirectory before 9.0.1 allows remote attackers to bypass intended access restrictions by leveraging predictable cookies.

Affected configurations

• novell edirectory (<= 9.0)

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References