Lucene search
HistoryNov 02, 2013 - 7:55 p.m.
CVE-2013-1084
novell
zenworks
configuration management
zcm
vulnerability
directory traversal
cve-2013-1084
nvd
6.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.636 Medium
EPSS
Percentile
97.8%
Directory traversal vulnerability in the GetFle method in the umaninv service in Novell ZENworks Configuration Management (ZCM) 11.2.3 allows remote attackers to read arbitrary files via a … (dot dot) in the Filename parameter in a GetFile action to zenworks-unmaninv/.
| CPE | Name | Operator | Version |
|---|---|---|---|
| novell:zenworks_configuration_management | novell zenworks configuration management | eq | 11.2.3 |
Related
checkpoint_advisories
checkpoint_advisories
zdi
zdi
Novell ZENworks umaninv Information Disclosure Vulnerability
2013-11-24 00:00:00
cvelist
cvelist
CVE-2013-1084
2022-10-03 16:14:49
prion
prion
Directory traversal
2013-11-02 19:55:00
nessus
nessus
Novell ZENworks Configuration Management < 11.2.4 Multiple Vulnerabilities
2013-11-01 00:00:00
6.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.636 Medium
EPSS
Percentile
97.8%
Related for CVE-2013-1084