Skip to main content

Zenworks Configuration Management CVE-2015-0785

HIGH
Information Exposure (CWE-200)
2017-08-09 security@opentext.com
Information Disclosure Zenworks Configuration Management
7.5
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Aug 09, 2017 - 18:29 cve.org
HIGH 7.5

DescriptionCVE.org

com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remote attackers to read arbitrary folders via the dirname variable.

AnalysisAI

com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remote attackers to read arbitrary folders via the dirname variable. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Exposure of Sensitive Information (CWE-200), which allows attackers to access sensitive data that should not be disclosed. com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remote attackers to read arbitrary folders via the dirname variable. Affected products include: Novell Zenworks Configuration Management.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Minimize information in error messages, implement proper access controls, encrypt sensitive data at rest and in transit.

More in Zenworks Configuration Management

View all
CVE-2015-0779 CRITICAL POC
10.0 Jun 07

Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11
CVE-2013-1080 CRITICAL POC
10.0 Mar 29

The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform a
CVE-2012-2215 MEDIUM POC
5.0 Apr 09

Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1
CVE-2015-0786 CRITICAL
9.8 Aug 09

Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration

CVE-2013-3706 MEDIUM
5.0 Mar 06

Directory traversal vulnerability in the PreBoot service in Novell ZENworks Configuration Management (ZCM) 11.2 allows r
CVE-2015-0781 CRITICAL
9.8 Aug 09

Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management (
CVE-2015-0780 CRITICAL
9.8 Aug 09

SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks Configuration
CVE-2015-0782 CRITICAL
9.8 Aug 09

SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Managemen
CVE-2013-6345 CRITICAL
10.0 Nov 02

Unspecified vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 has unknown im
CVE-2015-0784 HIGH
7.5 Aug 09

Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain Session IDs of logged i
CVE-2013-1079 MEDIUM
6.8 Mar 29

Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy.dll in Adm
CVE-2013-6347 MEDIUM
6.8 Nov 02

Session fixation vulnerability in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers t

Same weakness CWE-200 – Information Exposure

View all
CVE-2016-6415 HIGH POC
7.5
CVE-2013-7331 MEDIUM POC
6.5
CVE-2025-31125 MEDIUM POC
5.3
CVE-2025-11749 CRITICAL POC
9.8
CVE-2017-16894 HIGH POC
7.5
CVE-2017-11165 CRITICAL POC
9.8
CVE-2016-2388 MEDIUM POC
5.3
CVE-2016-1561 HIGH POC
7.5

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2015-0785 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy