Cleartext Password Transmission in Novell Data Synchronizer Mobility Pack
CVE-2011-2223

Currently unrated

Key Information:

Vendor

Novell
Status
Mobility Pack
Data Synchronizer
Vendor
CVE Published:
9 August 2011

What is CVE-2011-2223?

The Mobility Pack for Novell Data Synchronizer, prior to version 1.2, embeds significant security issues by transmitting Admin LDAP passwords in cleartext. This vulnerability allows remote attackers to intercept sensitive information through network sniffing, potentially compromising the integrity of user account data and overall system security.

References

http://secunia.com/advisories/45527
third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/support/viewContent.do?externalId=7...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/49069
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2011-2223 : Cleartext Password Transmission in Novell Data Synchronizer Mobility Pack