Lucene search

K
cveMitreCVE-2011-2221
HistoryAug 09, 2011 - 10:55 p.m.

CVE-2011-2221

2011-08-0922:55:00
CWE-264
mitre
web.nvd.nist.gov
26
cve-2011-2221
novell data synchronizer
mobility pack
webadmin authentication
groupwise
remote attackers

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

56.6%

The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to bypass WebAdmin authentication and obtain sensitive GroupWise information via unspecified vectors.

Affected configurations

Nvd
Node
novelldata_synchronizerMatch1.0.0
OR
novelldata_synchronizerMatch1.1.0
OR
novelldata_synchronizerMatch1.1.1
OR
novelldata_synchronizerMatch1.1.2
OR
novellmobility_packMatch1.0
OR
novellmobility_packMatch1.1
OR
novellmobility_packMatch1.1.1
OR
novellmobility_packMatch1.1.2
VendorProductVersionCPE
novelldata_synchronizer1.0.0cpe:2.3:a:novell:data_synchronizer:1.0.0:*:*:*:*:*:*:*
novelldata_synchronizer1.1.0cpe:2.3:a:novell:data_synchronizer:1.1.0:*:*:*:*:*:*:*
novelldata_synchronizer1.1.1cpe:2.3:a:novell:data_synchronizer:1.1.1:*:*:*:*:*:*:*
novelldata_synchronizer1.1.2cpe:2.3:a:novell:data_synchronizer:1.1.2:*:*:*:*:*:*:*
novellmobility_pack1.0cpe:2.3:a:novell:mobility_pack:1.0:*:*:*:*:*:*:*
novellmobility_pack1.1cpe:2.3:a:novell:mobility_pack:1.1:*:*:*:*:*:*:*
novellmobility_pack1.1.1cpe:2.3:a:novell:mobility_pack:1.1.1:*:*:*:*:*:*:*
novellmobility_pack1.1.2cpe:2.3:a:novell:mobility_pack:1.1.2:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

56.6%

Related for CVE-2011-2221