Directory traversal

2015-06-0723:59:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.946 High

EPSS

Percentile

99.3%

JSON

Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote attackers to execute arbitrary code via a crafted directory name in the uid parameter, in conjunction with a WAR filename in the filename parameter and WAR content in the POST data, a different vulnerability than CVE-2010-5323 and CVE-2010-5324.

CPENameOperatorVersion
zenworks_configuration_managementeq11.2.2
zenworks_configuration_managementeq11 sp1
zenworks_configuration_managementeq11
zenworks_configuration_managementeq11.2.3
zenworks_configuration_managementeq11.2
zenworks_configuration_managementeq11.2.1

Name	Operator	Version
zenworks_configuration_management	eq	11.2.2
zenworks_configuration_management	eq	11 sp1
zenworks_configuration_management	eq	11
zenworks_configuration_management	eq	11.2.3
zenworks_configuration_management	eq	11.2
zenworks_configuration_management	eq	11.2.1