DS
Product
Data Synchronizer
7
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Data Synchronizer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-3014 | – | Aug 9 | The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, which makes it easier for remote… Affected: 1.0.0; 1.1.0; 1.1.1; 1.1.2 |
| CVE-2011-3013 | – | Aug 9 | WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 supports weak SSL ciphers, which makes it easier for remote attackers to obtain… Affected: 1.0.0; 1.1.0; 1.1.1; 1.1.2 |
| CVE-2011-2224 | – | Aug 9 | The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote… Affected: 1.0.0; 1.1.0; 1.1.1; 1.1.2 |
| CVE-2011-2223 | – | Aug 9 | The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in cleartext, which allows remote attackers to obtain sensitive… Affected: 1.0.0; 1.1.0; 1.1.1; 1.1.2 |
| CVE-2011-2222 | – | Aug 9 | Session fixation vulnerability in WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to hijack web sessions… Affected: 1.0.0; 1.1.0; 1.1.1; 1.1.2 |
| CVE-2011-2221 | – | Aug 9 | The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to bypass WebAdmin authentication and obtain sensitive GroupWise… Affected: 1.0.0; 1.1.0; 1.1.1; 1.1.2 |
| CVE-2011-1711 | – | Jun 9 | Unspecified vulnerability in the Mobility Pack 1.1.2 and earlier in Novell Data Synchronizer 1.0.x, and 1.1.x through 1.1.1 build 428, allows remote authenticated users to access… Affected: 1.0.0; 1.1.0; 1.1.1 |
Showing 7