CVE-2010-4229

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 25.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-04-18 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory traversal sequences in a filename field in an upload request.

Affected products

Novell Zenworks Configuration Management: 10.3, 10.3.1, 11

References

http://secunia.com/advisories/44120
http://securityreason.com/securityalert/8207
http://securitytracker.com/id?1025313
http://www.novell.com/support/viewContent.do?externalId=7007841
http://www.securityfocus.com/archive/1/517425/100/0/threaded
http://www.securityfocus.com/bid/47295
http://www.vupen.com/english/advisories/2011/0917
http://zerodayinitiative.com/advisories/ZDI-11-118/
https://exchange.xforce.ibmcloud.com/vulnerabilities/66656
http://secunia.com/advisories/44120
http://securityreason.com/securityalert/8207
http://securitytracker.com/id?1025313

Get alerted when CVE-2010-4229 or the next vulnerability affects your stack