CVE-2011-3014: Medium severity novell mobility pack vulnerability
The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, which makes it easier for remote attackers to obtain sensitive information by leveraging an unattended workstation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3014?
CVE-2011-3014 is classified as a medium severity vulnerability due to the potential for sensitive information disclosure.
How do I fix CVE-2011-3014?
To mitigate CVE-2011-3014, update to a later version of the Novell Mobility Pack or Novell Data Synchronizer that addresses this vulnerability.
What does CVE-2011-3014 affect?
CVE-2011-3014 affects Novell Mobility Pack 1.0 to 1.2 and Novell Data Synchronizer versions 1.0.0 to 1.1.2.
How can attackers exploit CVE-2011-3014?
Attackers can exploit CVE-2011-3014 by obtaining sensitive information from improperly cached HTTPS responses on unattended workstations.
Is user interaction required to exploit CVE-2011-3014?
Yes, an attacker must have physical or remote access to an unattended workstation to exploit CVE-2011-3014.