Path Traversal in Novell Zenworks Configuration Management
CVE-2013-1079
Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.3 through 11.2 allows remote attackers to execute arbitrary local DLL files via a crafted web page that also calls the Initialize method.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.024 (82.0th percentile) — read the EPSS interpretation.
Affected products
- Novell Zenworks_configuration_management — versions 10.3, 10.3.1, 10.3.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)