Mobility Pack (Novell) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2011-08-09. Vendor: Novell.

CVEs of Mobility Pack

• CVE-2011-3013 - CVSS 5 (medium), 2011-08-09: WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 supports weak SSL ciphers, which makes it easier for remote…
• CVE-2011-3014 - CVSS 5 (medium), 2011-08-09: The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, which makes it…
• CVE-2011-2222 - CVSS 4.3 (medium), 2011-08-09: Session fixation vulnerability in WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to…
• CVE-2011-2221 - CVSS 5 (medium), 2011-08-09: The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to bypass WebAdmin authentication and obtain…
• CVE-2011-2224 - CVSS 4.3 (medium), 2011-08-09: The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not include the HTTPOnly flag in a Set-Cookie header, which makes it…
• CVE-2011-2223 - CVSS 5 (medium), 2011-08-09: The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in cleartext, which allows remote attackers…
• CVE-2011-1711 - CVSS 5.5 (medium), 2011-06-09: Unspecified vulnerability in the Mobility Pack 1.1.2 and earlier in Novell Data Synchronizer 1.0.x, and 1.1.x through 1.1.1 build 428, allows remote…