The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to bypass WebAdmin authentication and obtain sensitive GroupWise information via unspecified vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Data_synchronizer | Novell | 1.0.0 (including) | 1.0.0 (including) |
| Data_synchronizer | Novell | 1.1.0 (including) | 1.1.0 (including) |
| Data_synchronizer | Novell | 1.1.1 (including) | 1.1.1 (including) |
| Data_synchronizer | Novell | 1.1.2 (including) | 1.1.2 (including) |
| Mobility_pack | Novell | 1.0 (including) | 1.0 (including) |
| Mobility_pack | Novell | 1.1 (including) | 1.1 (including) |
| Mobility_pack | Novell | 1.1.1 (including) | 1.1.1 (including) |
| Mobility_pack | Novell | 1.1.2 (including) | 1.1.2 (including) |