CVE-2005-3786

3 documents3 sources
Severity
4.6MEDIUM
EPSS
0.1%
top 78.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Novell ZenworksNovell Zenworks DesktopsNovell Zenworks Servers
Timeline
PublishedNov 23
Latest updateMay 1

Description

Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict access to Remote Diagnostics, which allows local users to bypass security policies by using Console One.

CVSS vector

AV:L/AC:L/C:P/I:P/A:PExploitability: 3.9 | Impact: 6.4

Affected Packages3 packages

Patches

Patch: secunia.com ↗Patch: support.novell.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-cvfx-7rq4-r2px: Novell ZENworks for Desktops 4↗2022-05-01
▶
CVEList
CVE-2005-3786: Novell ZENworks for Desktops 4↗2005-11-23
▶
CVE-2005-3786 (MEDIUM CVSS 4.6) | Novell ZENworks for Desktops 4.0.1 | cvebase.io