CVE-2011-3013
Summary
| CVE | CVE-2011-3013 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2011-08-09 22:55:00 UTC |
| Updated | 2017-08-29 01:29:00 UTC |
| Description | WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 supports weak SSL ciphers, which makes it easier for remote attackers to obtain access via a brute-force attack. |
Risk And Classification
Problem Types: CWE-310
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Novell | Data Synchronizer | 1.0.0 | All | All | All |
| Application | Novell | Data Synchronizer | 1.1.0 | All | All | All |
| Application | Novell | Data Synchronizer | 1.1.1 | All | All | All |
| Application | Novell | Data Synchronizer | 1.1.2 | All | All | All |
| Application | Novell | Data Synchronizer | 1.0.0 | All | All | All |
| Application | Novell | Data Synchronizer | 1.1.0 | All | All | All |
| Application | Novell | Data Synchronizer | 1.1.1 | All | All | All |
| Application | Novell | Data Synchronizer | 1.1.2 | All | All | All |
| Application | Novell | Mobility Pack | 1.0 | All | All | All |
| Application | Novell | Mobility Pack | 1.1 | All | All | All |
| Application | Novell | Mobility Pack | 1.1.1 | All | All | All |
| Application | Novell | Mobility Pack | 1.1.2 | All | All | All |
| Application | Novell | Mobility Pack | 1.0 | All | All | All |
| Application | Novell | Mobility Pack | 1.1 | All | All | All |
| Application | Novell | Mobility Pack | 1.1.1 | All | All | All |
| Application | Novell | Mobility Pack | 1.1.2 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Weak SSL Ciphers supported with WebAdmin | CONFIRM | www.novell.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.