« Volver al listado

CVE-2016-9166

Estado: ModificadaAlta (7.5)—

NetIQ eDirectory versions prior to 9.0.2, under some circumstances, could be susceptible to downgrade of communication security.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microfocus — Netiq Edirectory

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-9166",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security@opentext.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "NetIQ eDirectory",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 9.0.2"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-03-21T15:59:52.657",
  "references": [
    {
      "url": "https://www.netiq.com/documentation/edirectory-9/edirectory902_releasenotes/data/edirectory902_releasenotes.html",
      "source": "security@opentext.com"
    },
    {
      "url": "https://www.netiq.com/documentation/edirectory-9/edirectory902_releasenotes/data/edirectory902_releasenotes.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "NetIQ eDirectory versions prior to 9.0.2, under some circumstances, could be susceptible to downgrade of communication security."
    },
    {
      "lang": "es",
      "value": "NetIQ eDirectory, en versiones anteriores a la 9.0.2, podría ser susceptible bajo ciertas circunstancias a la degradación de la seguridad de las comunicaciones."
    }
  ],
  "lastModified": "2026-06-17T00:55:37.237",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microfocus:netiq_edirectory:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "275D5EDF-F276-4227-9F31-A26037020B84",
              "versionEndExcluding": "9.0"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:netiq_edirectory:9.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AFBA7995-E39B-4DC5-BDAD-232C5708107D"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:netiq_edirectory:9.0:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F9D04D05-6050-4DAB-BDFF-7B3076C4BC7B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@opentext.com"
}