PT-2012-20: Authorization Mechanism Bypassing in NetIQ eDirectory Vulnerable softwareNetIQ eDirectory Version: 8.8.6.6 and earlier; 8.8.7.1 and earlierApplication link: https://www.netiq.com/products/edirectory/Severity levelSeverity level: Medium Impact: Protection Mechanism Bypassing Access Vector: Remote CVSS v2: Base Score: 6.4 Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:N) CVE: CVE-2012-0430 Vulnerability descriptionThe specialists of Positive Research, the Positive Technologies company research center, found a Authorization Mechanism Bypassing vulnerability in eDirectory.How to fixUpdate your software up to the latest versionAdvisory status06.07.2012 - Vendor is notified 06.07.2012 - Vendor gets vulnerability details 18.12.2012 - Vendor releases fixed version and details 01.02.2013 - Public disclosureCreditsThe vulnerabilities has discovered by Dmitry Serebryannikov, Positive Research Center (Positive Technologies Company)Referenceshttp://en.securitylab.ru/lab/PT-2012-20 http://www.novell.com/support/kb/doc.php?id=7011538 Reports on the vulnerabilities previously discovered by Positive Research:http://ptsecurity.com/research/advisory/ http://en.securitylab.ru/lab/