Directory traversal

2013-03-2916:09:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.8%

JSON

Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.3 through 11.2 allows remote attackers to execute arbitrary local DLL files via a crafted web page that also calls the Initialize method.

CPENameOperatorVersion
zenworks_configuration_managementeq11.1.97
zenworks_configuration_managementeq11.1
zenworks_configuration_managementeq10.3.2
zenworks_configuration_managementeq10.3.1
zenworks_configuration_managementeq11
zenworks_configuration_managementeq10.3
zenworks_configuration_managementeq10.3.3
zenworks_configuration_managementeq11.2

Name	Operator	Version
zenworks_configuration_management	eq	11.1.97
zenworks_configuration_management	eq	11.1
zenworks_configuration_management	eq	10.3.2
zenworks_configuration_management	eq	10.3.1
zenworks_configuration_management	eq	11
zenworks_configuration_management	eq	10.3
zenworks_configuration_management	eq	10.3.3
zenworks_configuration_management	eq	11.2