CVE-2013-1082

2013-03-2916:09:05

CWE-22

mitre

web.nvd.nist.gov

104

cve-2013-1082

directory traversal vulnerability

dusap.php

novell zenworks mobile management

remote attackers

local files

language parameter

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.955

Percentile

99.4%

JSON

Directory traversal vulnerability in DUSAP.php in Novell ZENworks Mobile Management before 2.7.1 allows remote attackers to include and execute arbitrary local files via the language parameter.

Affected configurations

Nvd

Node

novellzenworks_mobile_managementRange≤2.7.0

novellzenworks_mobile_managementMatch2.6.1

VendorProductVersionCPE
novellzenworks_mobile_management*cpe:2.3:a:novell:zenworks_mobile_management:*:*:*:*:*:*:*:*
novellzenworks_mobile_management2.6.1cpe:2.3:a:novell:zenworks_mobile_management:2.6.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
novell	zenworks_mobile_management	*	cpe:2.3:a:novell:zenworks_mobile_management::::::::
novell	zenworks_mobile_management	2.6.1	cpe:2.3:a:novell:zenworks_mobile_management:2.6.1:::::::*