CVE-2013-1079 — Path Traversal in Zenworks Configuration Management

CWE-22 — Path Traversal3 documents3 sources
Severity
6.8MEDIUMNVD
EPSS
7.0%
top 8.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Novell Zenworks Configuration Management
Timeline
PublishedMar 29
Latest updateMay 17

Description

Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.3 through 11.2 allows remote attackers to execute arbitrary local DLL files via a crafted web page that also calls the Initialize method.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-xm68-g67f-45f6: Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy↗2022-05-17
▶
CVEList
CVE-2013-1079: Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy↗2013-03-29
▶
CVE-2013-1079 — Path Traversal | cvebase