Vulnerability in Novell Data Synchronizer

CVE-2011-2221

The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to bypass WebAdmin authentication and obtain sensitive GroupWise information via unspecified vectors.

EPSS: 0.014 (68.7th percentile) — read the EPSS interpretation.

Affected products

Novell Data_synchronizer — versions 1.0.0, 1.1.0, 1.1.1
Novell Mobility_pack — versions 1.0, 1.1, 1.1.1
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)