Lucene search

MitreCVE-2011-3013

HistoryAug 09, 2011 - 10:55 p.m.

CVE-2011-3013

2011-08-0922:55:01

CWE-310

mitre

web.nvd.nist.gov

novell data synchronizer

cve-2011-3013

weak ssl ciphers

brute-force attack

webadmin

mobility pack

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.004

Percentile

74.1%

JSON

WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 supports weak SSL ciphers, which makes it easier for remote attackers to obtain access via a brute-force attack.

Affected configurations

Nvd

Node

novelldata_synchronizerMatch1.0.0

novelldata_synchronizerMatch1.1.0

novelldata_synchronizerMatch1.1.1

novelldata_synchronizerMatch1.1.2

novellmobility_packMatch1.0

novellmobility_packMatch1.1

novellmobility_packMatch1.1.1

novellmobility_packMatch1.1.2

VendorProductVersionCPE
novelldata_synchronizer1.0.0cpe:2.3:a:novell:data_synchronizer:1.0.0:*:*:*:*:*:*:*
novelldata_synchronizer1.1.0cpe:2.3:a:novell:data_synchronizer:1.1.0:*:*:*:*:*:*:*
novelldata_synchronizer1.1.1cpe:2.3:a:novell:data_synchronizer:1.1.1:*:*:*:*:*:*:*
novelldata_synchronizer1.1.2cpe:2.3:a:novell:data_synchronizer:1.1.2:*:*:*:*:*:*:*
novellmobility_pack1.0cpe:2.3:a:novell:mobility_pack:1.0:*:*:*:*:*:*:*
novellmobility_pack1.1cpe:2.3:a:novell:mobility_pack:1.1:*:*:*:*:*:*:*
novellmobility_pack1.1.1cpe:2.3:a:novell:mobility_pack:1.1.1:*:*:*:*:*:*:*
novellmobility_pack1.1.2cpe:2.3:a:novell:mobility_pack:1.1.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
novell	data_synchronizer	1.0.0	cpe:2.3:a:novell:data_synchronizer:1.0.0:::::::*
novell	data_synchronizer	1.1.0	cpe:2.3:a:novell:data_synchronizer:1.1.0:::::::*
novell	data_synchronizer	1.1.1	cpe:2.3:a:novell:data_synchronizer:1.1.1:::::::*
novell	data_synchronizer	1.1.2	cpe:2.3:a:novell:data_synchronizer:1.1.2:::::::*
novell	mobility_pack	1.0	cpe:2.3:a:novell:mobility_pack:1.0:::::::*
novell	mobility_pack	1.1	cpe:2.3:a:novell:mobility_pack:1.1:::::::*
novell	mobility_pack	1.1.1	cpe:2.3:a:novell:mobility_pack:1.1.1:::::::*
novell	mobility_pack	1.1.2	cpe:2.3:a:novell:mobility_pack:1.1.2:::::::*

References

www.novell.com/support/viewContent.do?externalId=7009056

exchange.xforce.ibmcloud.com/vulnerabilities/69168

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.004

Percentile

74.1%

JSON

Related for CVE-2011-3013