Unscored severity · published Dec 25, 2012
CVE-2012-0430
Unspecified vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote attackers to obtain an administrator cookie and bypass…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Unspecified vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote attackers to obtain an administrator cookie and bypass authorization checks via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ED
Edirectory · Microfocus
8.8.6.0; 8.8.6.1; 8.8.6.2; 8.8.6.3; 8.8.6.4; 8.8.6.5; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0430
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0430
www.novell.com
http://www.novell.com/support/kb/doc.php?id=3426981
www.novell.com
http://www.novell.com/support/kb/doc.php?id=7011538
www.securitytracker.com
http://www.securitytracker.com/id?1027910
bugzilla.novell.com
https://bugzilla.novell.com/show_bug.cgi?id=772898
More from Edirectory
9.8
CVE-2021-38132
Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory
9.8
CVE-2017-9285
NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services
9.1
CVE-2021-22533
Possible Insertion of Sensitive Information into Log File Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.4.0000
8.8
CVE-2017-7429
The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute…
7.5
CVE-2021-22532
Possible NLDAP Denial of Service attack Vulnerability in eDirectory has been discovered in OpenText™ eDirectory before 9.2.4.0000