PT-2011-3692 · Novell · Novell Data Synchronizer

Published 2011-08-09 · Updated 2015-10-29 · CVE-2011-2222

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Novell Data Synchronizer versions 1.x through 1.1.2 build 428

Description The issue allows remote attackers to hijack web sessions. This is due to a session fixation vulnerability in WebAdmin in the Mobility Pack.

Recommendations For versions 1.x through 1.1.2 build 428, update to a version after 1.2 to resolve the issue.

Fix

Related Identifiers

CVE-2011-2222

Affected Products

Novell Data Synchronizer

References · 4

• http://novell.com/support/viewContent.do?externalId=7009054 · Vendor Advisory
• http://secunia.com/advisories/45527 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2222 · Security Note
• http://securityfocus.com/bid/49069 · Note