Vulnerability Details : CVE-2011-1711
Unspecified vulnerability in the Mobility Pack 1.1.2 and earlier in Novell Data Synchronizer 1.0.x, and 1.1.x through 1.1.1 build 428, allows remote authenticated users to access the accounts of other users via unknown vectors.
Products affected by CVE-2011-1711
- cpe:2.3:a:novell:mobility_pack:*:*:*:*:*:*:*:*
- cpe:2.3:a:novell:mobility_pack:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:novell:mobility_pack:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:novell:data_synchronizer:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:novell:data_synchronizer:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:novell:data_synchronizer:1.0.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2011-1711
0.23%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 60 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2011-1711
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.5
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:P/A:N |
8.0
|
4.9
|
NIST |
References for CVE-2011-1711
-
http://www.securityfocus.com/bid/48117
Novell Data Synchronizer User Account Unspecified Unauthorized Access Vulnerability
-
http://www.novell.com/support/viewContent.do?externalId=7008690
Novell Data Synchronizer Mobility Pack Unauthorized user access Security VulnerabilityPatch;Vendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/67840
Novell Data Synchronizer Mobility Pack unauthorized access CVE-2011-1711 Vulnerability Report
-
http://www.securitytracker.com/id?1025608
Novell Data Synchronizer Mobility Pack Unspecified Bug Lets Users Access Other User Accounts - SecurityTracker
Jump to