CVE-2011-3013 in Data Synchronizer

Riassunto

di MITRE

WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 supports weak SSL ciphers, which makes it easier for remote attackers to obtain access via a brute-force attack.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 09/08/2011
• Divulgazione: 09/08/2011
• Moderazione: accettato
• Voce: VDB-58223
• CPE: pronto
• CWE: CWE-310 (confermato)
• CVSS: 5.3 (VulDB)
• EPSS: 0.01188
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-3013
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-3013
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-3013/