Unrated severityNVD Advisory· Published Aug 9, 2011· Updated Apr 29, 2026
CVE-2011-2224
CVE-2011-2224
Description
The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.
Affected products
8cpe:2.3:a:novell:data_synchronizer:1.0.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:novell:data_synchronizer:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:novell:data_synchronizer:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:novell:data_synchronizer:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:novell:data_synchronizer:1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:novell:mobility_pack:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:novell:mobility_pack:*:*:*:*:*:*:*:*range: <=1.1.2
- cpe:2.3:a:novell:mobility_pack:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:novell:mobility_pack:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:novell:mobility_pack:1.1.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- secunia.com/advisories/45527nvdVendor Advisory
- www.novell.com/support/viewContent.donvdVendor Advisory
- www.securityfocus.com/bid/49069nvd
News mentions
0No linked articles in our index yet.