CVE-2010-5324
CVSS 10.0 - HIGH
Description
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a zenworks-fileupload request with a crafted directory name in the type parameter, in conjunction with a WAR filename in the filename parameter and WAR content in the POST data, a different vulnerability than CVE-2010-5323.
Affected Products
3| Vendor | Product | Version |
|---|---|---|
| novell | zenworks_configuration_management |
10.0
|
| novell | zenworks_configuration_management |
10.1
|
| novell | zenworks_configuration_management |
10.2
|
References
Weakness Types
CWE-22
CVE Information
- CVE ID:
CVE-2010-5324- Published:
- 2015-06-07
- Modified:
- 2026-05-06
- CVSS Score:
- 10.0
- Severity:
- HIGH
- Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Vendors
novell
Quick Actions
CVSS Severity Scale
0.0 - 3.9
LOW
4.0 - 6.9
MEDIUM
7.0 - 8.9
HIGH
9.0 - 10.0
CRITICAL