CVE-2011-3014

The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, which makes it easier for remote attackers to obtain sensitive information by leveraging an unattended workstation.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 70%
VendorProductVersion
novelldata_synchronizer
1.0.0
novelldata_synchronizer
1.1.0
novelldata_synchronizer
1.1.1
novelldata_synchronizer
1.1.2
novellmobility_pack
1.0
novellmobility_pack
1.1
novellmobility_pack
1.1.1
novellmobility_pack
1.1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.novell.com/support/viewContent.do?externalId=7009057
https://exchange.xforce.ibmcloud.com/vulnerabilities/69167
http://www.novell.com/support/viewContent.do?externalId=7009057
https://exchange.xforce.ibmcloud.com/vulnerabilities/69167