CVE-2013-1080: Critical severity Novell ZENworks Configuration Management vulnerability
The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for zenworks/jsp/index.jsp, which allows remote attackers to conduct directory traversal attacks, and consequently upload and execute arbitrary programs, via a request to TCP port 443.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1080?
CVE-2013-1080 is considered a high severity vulnerability due to its potential for directory traversal and arbitrary code execution.
How do I fix CVE-2013-1080?
To mitigate CVE-2013-1080, upgrade to ZENworks Configuration Management version 11.2.4 or later, which addresses the authentication issue.
What types of attacks can CVE-2013-1080 allow?
CVE-2013-1080 allows attackers to perform directory traversal attacks, enabling them to upload and execute arbitrary programs.
Which software versions are affected by CVE-2013-1080?
CVE-2013-1080 affects Novell ZENworks Configuration Management versions 10.3 and 11.2 prior to 11.2.4.
Is remote exploitation possible with CVE-2013-1080?
Yes, CVE-2013-1080 can be exploited remotely, allowing attackers to bypass authentication and perform unauthorized actions.