CVE-2017-9277

existing connection is being used even though eDirectory LDAP server is upgraded to EBA

Medium · published March 2, 2018

CVSS v3.0
4.2
EPSS
1%
Percentile
70.5
In the wild
Unconfirmed
What it is

The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA (Enhanced Background Authentication) kept open connections without EBA.

The record
Technical detail
CVSS v3.0
4.2 · MEDIUM
Vector
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01324 · 70.5th percentile
Published
2018-03-02T20:00Z
EPSS history
Timeline
  • 02 MAR 20:00Z
    existing connection is being used even though eDirectory LDAP server is upgraded to EBA
    cvelistv5