Vulnerability Details CVE-2011-2223
The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.6%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2011-2223
-
cpe:2.3:a:novell:data_synchronizer:1.0.0
-
cpe:2.3:a:novell:data_synchronizer:1.1.0
-
cpe:2.3:a:novell:data_synchronizer:1.1.1
-
cpe:2.3:a:novell:data_synchronizer:1.1.2
-
cpe:2.3:a:novell:mobility_pack:1.0
-
cpe:2.3:a:novell:mobility_pack:1.1
-
cpe:2.3:a:novell:mobility_pack:1.1.1
-
cpe:2.3:a:novell:mobility_pack:1.1.2