Open redirect

Open redirect vulnerability in the fwdToURL function in the ZCC login page in zcc-framework.jar in Novell ZENworks Configuration Management ZCM 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the directToPage...

CVE-2013-1093: Improper Input Validation

Open redirect vulnerability in the fwdToURL function in the ZCC login page in zcc-framework.jar in Novell ZENworks Configuration Management ZCM 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the directToPage...

PT-2013-2869

Name of the Vulnerable Software and Affected Versions Novell ZENworks Configuration Management ZCM versions 11.2 through 11.2.3a before Monthly Update 1 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. This is achieved via the...