exploitDog

CVE-2010-5323

Опубликовано: 07 июн. 2015

Источник: nvd

CVSS2: 10

EPSS Средний

Описание

Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a crafted WAR pathname in the filename parameter in conjunction with WAR content in the POST data, a different vulnerability than CVE-2010-5324.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:novell:zenworks_configuration_management:10.0:*:*:*:*:*:*:*

cpe:2.3:a:novell:zenworks_configuration_management:10.1:*:*:*:*:*:*:*

cpe:2.3:a:novell:zenworks_configuration_management:10.2:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.18217

Средний

10 Critical

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-3pg8-3336-w32h

github

больше 3 лет назад

Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a crafted WAR pathname in the filename parameter in conjunction with WAR content in the POST data, a different vulnerability than CVE-2010-5324.

EPSS

Процентиль: 95%

0.18217

Средний

10 Critical

CVSS2

Дефекты

CWE-22