VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 7, 2015· Updated Jun 16, 2026

CVE-2010-5324

CVE-2010-5324

Description

Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a zenworks-fileupload request with a crafted directory name in the type parameter, in conjunction with a WAR filename in the filename parameter and WAR content in the POST data, a different vulnerability than CVE-2010-5323.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Novell/Zenworks Configuration Management4 versions
    cpe:2.3:a:novell:zenworks_configuration_management:10.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:novell:zenworks_configuration_management:10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:zenworks_configuration_management:10.1:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:zenworks_configuration_management:10.2:*:*:*:*:*:*:*
    • (no CPE)range: <10.3

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.