HIGH🇬🇧 English

CVE-2017-5186

CVSS 7.5v3.0pub. 2017-04-27upd. 2026-05-13

Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2 (9.0.2.2) use the deprecated MD5 hashing algorithm in a communications certificate.

oryginał EN
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Netiq Edirectory

    APP
    Netiq
    9.09.0.19.0.2

  • Netiq Imanager

    APP
    Netiq
    3.03.0.13.0.2

  • Novell Edirectory

    APP
    Novell
    ≤ 8.8

  • Novell Imanager

    APP
    Novell
    ≤ 2.7
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2017-7432CRITICAL9.8ten sam produkt

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload...

CVE-2008-5038CRITICAL9.8ten sam produkt

Use-after-free vulnerability in the NetWare Core Protocol (NCP) feature in Novell eDirectory 8.7.3 SP10 before...

CVE-2002-2119CRITICAL9.8ten sam produkt

Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to ...

CVE-2022-38758HIGH7.2ten sam produkt

Cross-site Scripting (XSS) vulnerability in NetIQ iManager prior to version 3.2.6 allows attacker to execute m...

CVE-2017-7429HIGH8.8ten sam produkt

The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload...