CVE-2011-3014
Summary
| CVE | CVE-2011-3014 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2011-08-09 22:55:00 UTC |
| Updated | 2017-08-29 01:29:00 UTC |
| Description | The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, which makes it easier for remote attackers to obtain sensitive information by leveraging an unattended workstation. |
Risk And Classification
Problem Types: CWE-264
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Novell | Data Synchronizer | 1.0.0 | All | All | All |
| Application | Novell | Data Synchronizer | 1.1.0 | All | All | All |
| Application | Novell | Data Synchronizer | 1.1.1 | All | All | All |
| Application | Novell | Data Synchronizer | 1.1.2 | All | All | All |
| Application | Novell | Data Synchronizer | 1.0.0 | All | All | All |
| Application | Novell | Data Synchronizer | 1.1.0 | All | All | All |
| Application | Novell | Data Synchronizer | 1.1.1 | All | All | All |
| Application | Novell | Data Synchronizer | 1.1.2 | All | All | All |
| Application | Novell | Mobility Pack | 1.0 | All | All | All |
| Application | Novell | Mobility Pack | 1.1 | All | All | All |
| Application | Novell | Mobility Pack | 1.1.1 | All | All | All |
| Application | Novell | Mobility Pack | 1.1.2 | All | All | All |
| Application | Novell | Mobility Pack | 1.0 | All | All | All |
| Application | Novell | Mobility Pack | 1.1 | All | All | All |
| Application | Novell | Mobility Pack | 1.1.1 | All | All | All |
| Application | Novell | Mobility Pack | 1.1.2 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cacheable HTTPS Response | CONFIRM | www.novell.com | Vendor Advisory |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.