CVE-2016-9167: Novell Edirectory

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

NDSD in Novell eDirectory before 9.0.2 did not calculate ACLs on LDAP objects across partition boundaries correctly, which could lead to a privilege escalation by modifying user attributes that would otherwise be filtered by an ACL.

Affected products

• Novell Edirectory: up to and including 9.0.1

Published 2017-03-23. Last modified 2026-06-17.