CVE-2011-2222: Medium severity novell mobility pack vulnerability

Published Aug 9, 2011

Updated

Session fixation vulnerability in WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to hijack web sessions via unspecified vectors.

Affected Software

8 affected components

Novell Mobility Pack=1.1

Novell Data Synchronizer=1.1.2

Novell Data Synchronizer=1.1.0

Novell Data Synchronizer=1.1.1

Novell Mobility Pack=1.1.2

Novell Data Synchronizer=1.0.0

Novell Mobility Pack=1.0

Novell Mobility Pack=1.1.1

Event History

Aug 9, 2011

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2222?

CVE-2011-2222 has a high severity rating due to its potential to allow remote attackers to hijack web sessions.

How do I fix CVE-2011-2222?

To fix CVE-2011-2222, upgrade to a version of Novell Data Synchronizer or Mobility Pack that is patched against this vulnerability.

Which versions are affected by CVE-2011-2222?

CVE-2011-2222 affects Novell Mobility Pack versions 1.0 to 1.1.2 and Novell Data Synchronizer versions 1.0.0 to 1.1.2.

What type of vulnerability is CVE-2011-2222?

CVE-2011-2222 is a session fixation vulnerability that can be exploited by remote attackers.

What are the potential consequences of CVE-2011-2222?

Exploitation of CVE-2011-2222 may lead to unauthorized access to user sessions, compromising user accounts.