PT-2011-3691 · Novell · Webadmin+3

Publicado 2011-08-09 · Atualizado 2015-10-29 · CVE-2011-2221

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Novell Data Synchronizer versions 1.x through 1.1.2 build 428, with Mobility Pack before version 1.2

Description The issue allows remote attackers to bypass WebAdmin authentication, resulting in the potential exposure of sensitive GroupWise information. This is achieved via unspecified vectors.

Recommendations For Novell Data Synchronizer versions 1.x through 1.1.2 build 428, update the Mobility Pack to version 1.2 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-2221

Produtos afetados

Groupwise

Mobility Pack

Novell Data Synchronizer

Webadmin

Referências · 4

• http://securityfocus.com/bid/49069 · Nota
• http://novell.com/support/viewContent.do?externalId=7009053 · Aviso do Fabricante
• http://secunia.com/advisories/45527 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-2221 · Nota de Segurança