Information disclosure in Novell Zenworks Configuration Management
CVE-2012-2223
The xplat agent in Novell ZENworks Configuration Management (ZCM) 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might make it easier for remote attackers to conduct cross-site tracing (XST) attacks via unspecified vectors.
Vulnerability class: Information Disclosure
EPSS: 0.013 (68.5th percentile) — read the EPSS interpretation.
Affected products
- Novell Zenworks_configuration_management — versions 10.3, 10.3.1, 10.3.2
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2012-2223?
- CVE-2012-2223 is a vulnerability in Novell Zenworks Configuration Management, classified under Information Disclosure. Published 2012-04-11.
- Is CVE-2012-2223 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.