CVE Catalog

CVE-2015-0781

Critical
Published: Translated: NVD NIST

Summary

Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to upload and execute arbitrary files via unspecified vectors.

Risk Assessment

Attackers can exploit this vulnerability to remotely execute malicious code, potentially leading to serious security breaches within the organization.

Recommendation

It is recommended to update ZENworks Configuration Management to the latest version to mitigate this vulnerability and implement additional security measures such as monitoring and access control.

Original NVD description (English source)

Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to upload and execute arbitrary files via unspecified vectors.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS