Directory Traversal Vulnerability in Novell ZENworks Configuration Management
CVE-2010-5324

Currently unrated

Key Information:

Vendor: Novell
Status: Zenworks Configuration Management
Vendor: CVE Published:; 7 June 2015

What is CVE-2010-5324?

The directory traversal vulnerability in the UploadServlet of Novell ZENworks Configuration Management (ZCM) 10 allows remote attackers to execute arbitrary code. By sending a specifically crafted zenworks-fileupload request containing an altered directory name within the type parameter, along with a malicious WAR filename in the filename parameter and corresponding content in the POST data, attackers can exploit this flaw. This is distinct from previous vulnerabilities and emphasizes the importance of patching affected versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch