Vulnerability in Novell Data Synchronizer

CVE-2011-2222

Session fixation vulnerability in WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to hijack web sessions via unspecified vectors.

EPSS: 0.012 (64.5th percentile) — read the EPSS interpretation.

Affected products

Novell Data_synchronizer — versions 1.0.0, 1.1.0, 1.1.1
Novell Mobility_pack — versions 1.0, 1.1, 1.1.1
N/a — versions n/a

References

cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)