PT-2011-3691 · Novell · Webadmin+3

Published 2011-08-09 · Updated 2015-10-29 · CVE-2011-2221

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Novell Data Synchronizer versions 1.x through 1.1.2 build 428, with Mobility Pack before version 1.2

Description The issue allows remote attackers to bypass WebAdmin authentication, resulting in the potential exposure of sensitive GroupWise information. This is achieved via unspecified vectors.

Recommendations For Novell Data Synchronizer versions 1.x through 1.1.2 build 428, update the Mobility Pack to version 1.2 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-2221

Affected Products

Groupwise

Mobility Pack

Novell Data Synchronizer

Webadmin

References · 4

• http://novell.com/support/viewContent.do?externalId=7009053 · Vendor Advisory
• http://secunia.com/advisories/45527 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2221 · Security Note
• http://securityfocus.com/bid/49069 · Note