CVE-2010-4229

2011-04-1818:55:00

CWE-22

[email protected]

web.nvd.nist.gov

cve-2010-4229

directory traversal

vulnerability

zenworks asset management

novell

zam

configuration management

7.2 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.903 High

EPSS

Percentile

98.8%

JSON

Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory traversal sequences in a filename field in an upload request.

CPENameOperatorVersion
novell:zenworks_configuration_managementnovell zenworks configuration managementeq10.3.1
novell:zenworks_configuration_managementnovell zenworks configuration managementeq11
novell:zenworks_configuration_managementnovell zenworks configuration managementeq10.3

CPE	Name	Operator	Version
novell:zenworks_configuration_management	novell zenworks configuration management	eq	10.3.1
novell:zenworks_configuration_management	novell zenworks configuration management	eq	11
novell:zenworks_configuration_management	novell zenworks configuration management	eq	10.3