CVE-2016-5747: High severity micro focus netiq edirectory vulnerability
Published Mar 23, 2017
·Updated
A security vulnerability in cookie handling in the http stack implementation in NDSD in Novell eDirectory before 9.0.1 allows remote attackers to bypass intended access restrictions by leveraging predictable cookies.
Affected Software
1 affected component
Novell eDirectory<=9.0
Event History
Mar 23, 2017
CVE Published
via MITRE·06:36 AM
Data Sourced
via MITRE·06:36 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-5747?
CVE-2016-5747 has a moderate severity rating as it allows remote attackers to bypass access restrictions.
2
How do I fix CVE-2016-5747?
To fix CVE-2016-5747, upgrade Novell eDirectory to version 9.0.1 or later.
3
What systems are affected by CVE-2016-5747?
CVE-2016-5747 affects Novell eDirectory versions prior to 9.0.1.
4
What does CVE-2016-5747 exploit?
CVE-2016-5747 exploits predictable cookies in the http stack implementation of Novell eDirectory.
5
Is CVE-2016-5747 being actively exploited?
There is no public information indicating that CVE-2016-5747 is currently being actively exploited.