Directory Traversal Vulnerability in Novell ZENworks Configuration Management

CVE-2010-5323

Summary

A directory traversal vulnerability exists in the UploadServlet of the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 prior to version 10.3. This flaw allows remote attackers to exploit the system by executing arbitrary code through a specially crafted WAR pathname provided in the filename parameter, combined with malicious WAR content submitted in the POST request. This vulnerability poses a significant risk due to its potential for unauthorized access and control over the affected systems.

References