ByteOS Network

NVD Vulnerability Details :

CVE-2013-1080

Deferred

Source-cve@mitre.org

Published At-29 Mar, 2013 | 16:09

Updated At-11 Apr, 2025 | 00:51

The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for zenworks/jsp/index.jsp, which allows remote attackers to conduct directory traversal attacks, and consequently upload and execute arbitrary programs, via a request to TCP port 443.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Novell

>>zenworks_configuration_management>>10.3

cpe:2.3:a:novell:zenworks_configuration_management:10.3:*:*:*:*:*:*:*

Novell

>>zenworks_configuration_management>>11.2

cpe:2.3:a:novell:zenworks_configuration_management:11.2:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-287	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.exploit-db.com/exploits/24938	cve@mitre.org	N/A
http://www.novell.com/support/kb/doc.php?id=7011812	cve@mitre.org	Vendor Advisory
http://www.novell.com/support/kb/doc.php?id=7012027	cve@mitre.org	N/A
http://www.zerodayinitiative.com/advisories/ZDI-13-049/	cve@mitre.org	N/A
http://www.exploit-db.com/exploits/24938	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.novell.com/support/kb/doc.php?id=7011812	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.novell.com/support/kb/doc.php?id=7012027	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.zerodayinitiative.com/advisories/ZDI-13-049/	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History