NetSight
medium5.0

CVE-2011-2223

The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in cleartext, which allows remote attackers …

Impact

The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected products

VendorProductAffected versions
NovellData Synchronizer
Versions 1.0.0, 1.1.0, 1.1.1, 1.1.2
NovellMobility Pack
Versions 1.0, 1.1, 1.1.1, 1.1.2

Weakness classification

References