eDirectory Under Attack: Possible External Service Interaction Vulnerability
CVE-2021-38133

6.5MEDIUM

Key Information:

Vendor
Opentext
Status
Edirectory
Vendor
CVE Published:
12 September 2024

Summary

An external service interaction vulnerability exists in OpenText eDirectory, affecting all versions prior to 9.2.6.0000. This vulnerability could potentially allow malicious actors to exploit the software, leading to unauthorized access or manipulation of user data. System administrators should apply the latest updates to safeguard against potential threats and ensure the integrity of their directory services.

Affected Version(s)

eDirectory Windows 9.2.0 <= 9.2.5.0000

References

https://www.netiq.com/documentation/edirectory-92/edirect...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.