cbcvebase.
CVE-2010-4229
published 2011-04-18

CVE-2010-4229: Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks Configuration…

PriorityP264critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
25.43%
97.7th percentile
Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory traversal sequences in a filename field in an upload request.

Affected

3 ranges
VendorProductVersion rangeFixed in
novellzenworks_configuration_management——
novellzenworks_configuration_management——
novellzenworks_configuration_management——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.