Skip to main content

Zenworks Configuration Management CVE-2013-6347

MEDIUM
Improper Authentication (CWE-287)
2013-11-02 cve@mitre.org
Authentication Bypass Zenworks Configuration Management
6.8
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:P/I:P/A:P
Attack Vector
Network
Attack Complexity
M
Confidentiality
P
Integrity
P
Availability
P

Lifecycle Timeline

1
CVE Published
Nov 02, 2013 - 20:55 cve.org
MEDIUM 6.8

DescriptionCVE.org

Session fixation vulnerability in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors.

AnalysisAI

Session fixation vulnerability in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. Session fixation vulnerability in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors. Affected products include: Novell Zenworks Configuration Management. Version information: before 11.2.4.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.

More in Zenworks Configuration Management

View all
CVE-2015-0779 CRITICAL POC
10.0 Jun 07

Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11
CVE-2013-1080 CRITICAL POC
10.0 Mar 29

The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform a
CVE-2012-2215 MEDIUM POC
5.0 Apr 09

Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1
CVE-2015-0786 CRITICAL
9.8 Aug 09

Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration

CVE-2013-3706 MEDIUM
5.0 Mar 06

Directory traversal vulnerability in the PreBoot service in Novell ZENworks Configuration Management (ZCM) 11.2 allows r
CVE-2015-0781 CRITICAL
9.8 Aug 09

Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management (
CVE-2015-0780 CRITICAL
9.8 Aug 09

SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks Configuration
CVE-2015-0782 CRITICAL
9.8 Aug 09

SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Managemen
CVE-2013-6345 CRITICAL
10.0 Nov 02

Unspecified vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 has unknown im
CVE-2015-0784 HIGH
7.5 Aug 09

Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain Session IDs of logged i
CVE-2013-1079 MEDIUM
6.8 Mar 29

Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy.dll in Adm
CVE-2015-0785 HIGH
7.5 Aug 09

com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remot

Same weakness CWE-287 – Improper Authentication

View all
CVE-2020-0688 HIGH POC
8.8
CVE-2023-46805 HIGH POC
8.2
CVE-2015-1187 CRITICAL POC
9.8
CVE-2024-7593 CRITICAL POC
9.8
CVE-2017-7921 CRITICAL POC
9.8
CVE-2024-53704 CRITICAL POC
9.8
CVE-2015-7755 CRITICAL POC
9.8
CVE-2013-0625 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2013-6347 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy