VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 11, 2012· Updated Apr 29, 2026

CVE-2012-2223

CVE-2012-2223

Description

The xplat agent in Novell ZENworks Configuration Management (ZCM) 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might make it easier for remote attackers to conduct cross-site tracing (XST) attacks via unspecified vectors.

Affected products

7
  • Novell/Zenworks Configuration Management7 versions
    cpe:2.3:a:novell:zenworks_configuration_management:10.3:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:novell:zenworks_configuration_management:10.3:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:zenworks_configuration_management:10.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:zenworks_configuration_management:10.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:zenworks_configuration_management:10.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:zenworks_configuration_management:11:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:zenworks_configuration_management:11.1:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:zenworks_configuration_management:11.1a:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.