CVE-2017-5186: Netiq Edirectory

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2 (9.0.2.2) use the deprecated MD5 hashing algorithm in a communications certificate.

Affected products

• Netiq Edirectory: version 9.0 only; version 9.0.1 only; version 9.0.2 only
• Netiq Imanager: version 3.0 only; version 3.0.1 only; version 3.0.2 only
• Novell Edirectory: up to and including 8.8
• Novell Imanager: up to and including 2.7

Published 2017-04-27. Last modified 2026-06-17.