CVE-2013-1084

Directory traversal vulnerability in the GetFle method in the umaninv service in Novell ZENworks Configuration Management (ZCM) 11.2.3 allows remote attackers…

published November 2, 2013

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in the GetFle method in the umaninv service in Novell ZENworks Configuration Management (ZCM) 11.2.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the Filename parameter in a GetFile action to zenworks-unmaninv/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05676 · 93.0th percentile
Published
2013-11-02T19:00Z
EPSS history
Timeline
  • 02 NOV 19:00Z
    Directory traversal vulnerability in the GetFle method in the umaninv service in Novell ZENworks Configuration Management (ZCM) 11.2.3 allows remote attackers…
    cvelistv5