CVE-2013-1084

2013-11-0219:00:00

mitre

www.cve.org

cve-2013-1084

directory traversal

novell zenworks configuration management

AI Score

6.6

Confidence

Low

EPSS

0.957

Percentile

99.5%

JSON

Directory traversal vulnerability in the GetFle method in the umaninv service in Novell ZENworks Configuration Management (ZCM) 11.2.3 allows remote attackers to read arbitrary files via a … (dot dot) in the Filename parameter in a GetFile action to zenworks-unmaninv/.