CVE-2010-4229: Path Traversal
Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory traversal sequences in a filename field in an upload request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4229?
CVE-2010-4229 is classified as a high severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2010-4229?
To fix CVE-2010-4229, upgrade the ZENworks Configuration Management to version 10.3.2 or later, or version 11 which addresses this vulnerability.
What impact does CVE-2010-4229 have on affected systems?
CVE-2010-4229 allows remote attackers to overwrite files and execute arbitrary code, leading to potential system compromise.
Which versions are affected by CVE-2010-4229?
CVE-2010-4229 affects Micro Focus ZENworks Configuration Management versions 10.3.1, 10.3, and 11 prior to the security updates.
Is CVE-2010-4229 a zero-day vulnerability?
CVE-2010-4229 was disclosed in 2010, and therefore is not classified as a zero-day vulnerability since a patch has been made available.