CVE-2012-2223

2012-04-1110:39:27

CWE-200

[email protected]

web.nvd.nist.gov

novell

zenworks

configuration management

zcm

vulnerability

cve-2012-2223

xst

http trace

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.5%

JSON

The xplat agent in Novell ZENworks Configuration Management (ZCM) 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might make it easier for remote attackers to conduct cross-site tracing (XST) attacks via unspecified vectors.

Affected configurations

NVD

Node

novellzenworks_configuration_managementMatch10.3

novellzenworks_configuration_managementMatch10.3.1

novellzenworks_configuration_managementMatch10.3.2

novellzenworks_configuration_managementMatch10.3.3

novellzenworks_configuration_managementMatch11

novellzenworks_configuration_managementMatch11.1

novellzenworks_configuration_managementMatch11.1a

CPENameOperatorVersion
novell:zenworks_configuration_managementnovell zenworks configuration managementeq10.3
novell:zenworks_configuration_managementnovell zenworks configuration managementeq10.3.1
novell:zenworks_configuration_managementnovell zenworks configuration managementeq10.3.2
novell:zenworks_configuration_managementnovell zenworks configuration managementeq10.3.3
novell:zenworks_configuration_managementnovell zenworks configuration managementeq11
novell:zenworks_configuration_managementnovell zenworks configuration managementeq11.1
novell:zenworks_configuration_managementnovell zenworks configuration managementeq11.1a

CPE	Name	Operator	Version
novell:zenworks_configuration_management	novell zenworks configuration management	eq	10.3
novell:zenworks_configuration_management	novell zenworks configuration management	eq	10.3.1
novell:zenworks_configuration_management	novell zenworks configuration management	eq	10.3.2
novell:zenworks_configuration_management	novell zenworks configuration management	eq	10.3.3
novell:zenworks_configuration_management	novell zenworks configuration management	eq	11
novell:zenworks_configuration_management	novell zenworks configuration management	eq	11.1
novell:zenworks_configuration_management	novell zenworks configuration management	eq	11.1a