CVE-2011-2222

概要

参考情報

• secunia.com/advisories/45527 · Vendor Advisory
• novell.com/support/viewContent.do · Vendor Advisory
• securityfocus.com/bid/49069

data synchronizer のその他の脆弱性

• CVE-2011-3014中 5.0The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, …
• CVE-2011-3013中 5.0WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 supports weak SSL ciphers, which makes it e…
• CVE-2011-2224中 4.3The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not include the HTTPOnly flag in a Set-Cookie head…
• CVE-2011-2223中 5.0The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in cleartext, which allow…
• CVE-2011-2221中 5.0The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to bypass WebAdmin authenticati…