CVE-2011-2223

CWE-310CWE-994 documents4 sources
Severity
5.0MEDIUM
EPSS
0.5%
top 35.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Novell Data SynchronizerNovell Mobility Pack
Timeline
PublishedAug 9
Latest updateMay 17

Description

The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDnovell/mobility_pack4 versions+3
▶NVDnovell/data_synchronizer4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-m222-936c-m3gc: The Mobility Pack before 1↗2022-05-17
▶
CVEList
CVE-2011-2223: The Mobility Pack before 1↗2011-08-09
▶
CVE-2011-2223 (MEDIUM CVSS 5) | The Mobility Pack before 1.2 in Nov | cvebase.io