Zenworks Configuration Management Security Vulnerabilities and Issues — Zenworks Configuration Management CVE List

Lucene search

NovellZenworks Configuration Management

5 matches found

CVE•added 2013/11/02 7:55 p.m.•137 views

CVE-2013-1084

Directory traversal vulnerability in the GetFle method in the umaninv service in Novell ZENworks Configuration Management (ZCM) 11.2.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the Filename parameter in a GetFile action to zenworks-unmaninv/.

5CVSS6.8AI score0.05076EPSS

CVE•added 2013/11/02 8:55 p.m.•44 views

CVE-2013-6346

Cross-site request forgery (CSRF) vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

6.8CVSS7.2AI score0.00896EPSS

CVE•added 2013/11/02 8:55 p.m.•41 views

CVE-2013-6347

Session fixation vulnerability in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors.

6.8CVSS6.8AI score0.02398EPSS

CVE•added 2013/11/02 8:55 p.m.•38 views

CVE-2013-6344

The ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows attackers to conduct cross-frame scripting attacks via unknown vectors.

4.3CVSS6.2AI score0.00589EPSS

CVE•added 2013/11/02 8:55 p.m.•37 views

CVE-2013-6345

Unspecified vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 has unknown impact and attack vectors related to an "Application Exception."

10CVSS6.5AI score0.0023EPSS