Privilege Escalation Vulnerability in Novell eDirectory

CVE-2016-9167

Summary

In Novell eDirectory versions prior to 9.0.2, the NDSD component did not properly calculate Access Control Lists (ACLs) on LDAP objects that cross partition boundaries. This flaw allows an attacker to potentially escalate privileges by modifying user attributes that should be restricted based on ACL filtering. Proper management of ACLs is crucial to secure users' data and maintain the integrity of access across the eDirectory environment.

References