CVE-2011-3014 | BDVDB-2026-46936 Detail

Description#

The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, which makes it easier for remote attackers to obtain sensitive information by leveraging an unattended workstation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/69167
http://www.novell.com/support/viewContent.do?externalId=7009057

Exploit#

No public exploit known

History#

Version 12011-08-09Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.