Launchpad.net

CVE 2016-9168

A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking.

See the CVE page on Mitre.org for more details.

References