Information Disclosure Vulnerability in Novell Data Synchronizer Mobility Pack
CVE-2011-3014

Currently unrated

Key Information:

Vendor
Novell
Status
Mobility Pack
Data Synchronizer
Vendor
CVE Published:
9 August 2011

Summary

The Novell Data Synchronizer Mobility Pack version 1.2 and earlier versions prior to 1.1.2 build 428 compromise secure data transmission by failing to adequately restrict caching of HTTPS responses. This flaw enables remote attackers to exploit unattended workstations, potentially gaining unauthorized access to sensitive information. Organizations using these versions should take immediate action to mitigate risks associated with this vulnerability.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/69167
vdb-entryx_refsource_XF
http://www.novell.com/support/viewContent.do?externalId=7...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.