VULNERABILITY INTELLIGENCE
CVE-2016-5747
CVSS score7.5 HIGH
EPSS probability1.94%
CISA KEVNot currently listed
Published2017-03-23
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
A security vulnerability in cookie handling in the http stack implementation in NDSD in Novell eDirectory before 9.0.1 allows remote attackers to bypass intended access restrictions by leveraging predictable cookies.
Weakness classification
- CWE-284: Improper Access Control