PT-2017-9982 · Novell · Edirectory

CVE-2016-9168

Publicado

2017-03-23

Atualizado

2017-04-05

CVSS v3.1

6.5

Média

Vetor

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Novell eDirectory versions prior to 9.0.2

Description A missing X-Frame-Options header in the NDS Utility Monitor in NDSD could be used by remote attackers for clickjacking.

Recommendations For versions prior to 9.0.2, update to version 9.0.2 or later to resolve the issue.

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2016-9168

Edirectory