Vulnerability in Novell Data Synchronizer
CVE-2011-2223
The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.014 (69.1th percentile) — read the EPSS interpretation.
Affected products
- Novell Data_synchronizer — versions 1.0.0, 1.1.0, 1.1.1
- Novell Mobility_pack — versions 1.0, 1.1, 1.1.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)