Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2011-2222

Overview

Vulnerability Score 4.3 4.3
CVE Id CVE-2011-2222
Last Modified 17 Mar 2015 09:59:03
Published 09 Aug 2011 06:55:00
Confidentiality Impact NONE NONE
Integrity Impact PARTIAL PARTIAL
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE

CVE-2011-2222

Summary

Session fixation vulnerability in WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to hijack web sessions via unspecified vectors.

Vulnerable Systems

Application

  • Novell Data Synchronizer 1.0.0

  • Novell Data Synchronizer 1.1.0

  • Novell Data Synchronizer 1.1.1

  • Novell Data Synchronizer 1.1.2

  • Novell Mobility Pack 1.0

  • Novell Mobility Pack 1.1

  • Novell Mobility Pack 1.1.1

  • Novell Mobility Pack 1.1.2


References

CONFIRM - http://www.novell.com/support/viewContent.do?externalId=7009054

SECUNIA - 45527

BID - 49069


Last Updated: 27 May 2016 11:08:06