CVE-2015-0785

Description

com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remote attackers to read arbitrary folders via the dirname variable.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• http://www.securityfocus.com/bid/74288
• http://www.zerodayinitiative.com/advisories/ZDI-15-152
• https://www.novell.com/support/kb/doc.php?id=7016431
• http://www.securityfocus.com/bid/74288
• http://www.zerodayinitiative.com/advisories/ZDI-15-152
• https://www.novell.com/support/kb/doc.php?id=7016431

CWEs

CWE-200

💬 Discuss CVE-2015-0785 on VIR Community →

Community-verified mitigations for this CVE will appear above when contributors publish them.