| Vulnerability Name: | CVE-2011-1711 (CCN-67840) | ||||||||
| Assigned: | 2011-06-03 | ||||||||
| Published: | 2011-06-03 | ||||||||
| Updated: | 2017-08-17 | ||||||||
| Summary: | Unspecified vulnerability in the Mobility Pack 1.1.2 and earlier in Novell Data Synchronizer 1.0.x, and 1.1.x through 1.1.1 build 428, allows remote authenticated users to access the accounts of other users via unknown vectors. | ||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
| ||||||||
| CVSS v2 Severity: | 5.5 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N) 4.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N/E:U/RL:OF/RC:C)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-noinfo | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2011-1711 Source: OSVDB Type: UNKNOWN 72759 Source: CCN Type: SA44864 Novell Data Synchronizer Mobility Pack Unspecified Security Bypass Vulnerability Source: SECUNIA Type: Vendor Advisory 44864 Source: CCN Type: Novell Document ID: 7008690 Novell Data Synchronizer Mobility Pack Unauthorized user access Security Vulnerability Source: CONFIRM Type: Patch, Vendor Advisory http://www.novell.com/support/viewContent.do?externalId=7008690 Source: CCN Type: OSVDB ID: 72759 Novell Data Synchronizer Mobility Pack Unspecified User Account Access Bypass Source: BID Type: UNKNOWN 48117 Source: CCN Type: BID-48117 Novell Data Synchronizer User Account Unspecified Unauthorized Access Vulnerability Source: SECTRACK Type: UNKNOWN 1025608 Source: XF Type: UNKNOWN novell-mobility-pack-unauth-access(67840) Source: XF Type: UNKNOWN novell-mobility-pack-unauth-access(67840) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||