Novell ZENworks Configuration Management umaninv Information Disclosure (CVE-2013-1084)

An information disclosure vulnerability exists in Novel ZENworks Configuration Management...

CVE-2013-6347

Session fixation vulnerability in Novell ZENworks Configuration Management ZCM before 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2013-6345

Unspecified vulnerability in the ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 has unknown impact and attack vectors related to an "Application Exception."...

CVE-2013-6344

The ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 allows attackers to conduct cross-frame scripting attacks via unknown vectors...

Session fixation

Session fixation vulnerability in Novell ZENworks Configuration Management ZCM before 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors...

Cross site scripting

The ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 allows attackers to conduct cross-frame scripting attacks via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-6345

CVE-2013-6345 examines an unspecified vulnerability in the ZCC page of Novell ZENworks Configuration Management (ZCM) prior to 11.2.4, with unknown impact/attack vectors described as an "Application Exception." All connected sources corroborate the issue exists in ZCM 11.2.3 and earlier, but do n...

CVE-2013-6346

Summary (CVE-2013-6346): A CSRF vulnerability affects Novell ZENworks Configuration Management (ZCM) prior to version 11.2.4 on the ZCC page, enabling remote attackers to hijack user authentication via unspecified vectors. Connected sources (Red Hat CVE entry, NVD record) corroborate the flaw and...

CVE-2013-6347

CVE-2013-6347: Session fixation vulnerability in Novell ZENworks Configuration Management (ZCM) prior to version 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors. Affected product: ZCM; root cause described as session fixation. Impact: web session hijacking. Remediati...

CVE-2013-6344

The ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 allows attackers to conduct cross-frame scripting attacks via unknown vectors...

CVE-2013-6345

Unspecified vulnerability in the ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 has unknown impact and attack vectors related to an "Application Exception."...

CVE-2013-6347

Session fixation vulnerability in Novell ZENworks Configuration Management ZCM before 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2013-6346

Cross-site request forgery CSRF vulnerability in the ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Directory traversal

Directory traversal vulnerability in the GetFle method in the umaninv service in Novell ZENworks Configuration Management ZCM 11.2.3 allows remote attackers to read arbitrary files via a .. dot dot in the Filename parameter in a GetFile action to zenworks-unmaninv/...

CVE-2013-1084

Directory traversal vulnerability in the GetFle method in the umaninv service in Novell ZENworks Configuration Management ZCM 11.2.3 allows remote attackers to read arbitrary files via a .. dot dot in the Filename parameter in a GetFile action to zenworks-unmaninv/...

CVE-2013-1084

CVE-2013-1084: A directory traversal vulnerability in the GetFle method of the umaninv service in Novell ZENworks Configuration Management (ZCM) 11.2.3 allows remote attackers to read arbitrary files by manipulating the Filename parameter in a GetFile action to zenworks-unmaninv/. This is describ...

Novell ZENworks Configuration Management < 11.2.4 Multiple Vulnerabilities

The version of Novell ZENworks Configuration Management installed on the remote host can be tricked into disclosing any file readable by the Novell ZENworks umaninv service, and as such it is affected by multiple vulnerabilities : - A directory traversal vulnerability exists that allows any file...

[USN-1928-1] Puppet vulnerabilities

========================================================================== Ubuntu Security Notice USN-1928-1 August 15, 2013 puppet vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

[SECURITY] [DSA 2761-1] puppet security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2761-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 19, 2013 http://www.debian.org/security/faq -...