CVE-2015-0785: Exposure of Sensitive Information to an Unauthorized Actor

com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management ZCM allows remote attackers to read arbitrary folders via the dirname variable...