Directory Traversal Vulnerability in Novell ZENworks Configuration Management
CVE-2010-5323
Currently unrated
Key Information:
- Vendor
Novell
- Vendor
- CVE Published:
- 7 June 2015
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 24%
What is CVE-2010-5323?
A directory traversal vulnerability exists in the UploadServlet of the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 prior to version 10.3. This flaw allows remote attackers to exploit the system by executing arbitrary code through a specially crafted WAR pathname provided in the filename parameter, combined with malicious WAR content submitted in the POST request. This vulnerability poses a significant risk due to its potential for unauthorized access and control over the affected systems.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.