Novell Zenworks Configuration Management
The issue concerns the web server in Novell ZENworks Configuration Management, which fails to properly authenticate requests to the "zenworks/jsp/index.jsp" endpoint. This allows remote attackers to perform directory traversal attacks, upload, and execute arbitrary programs by sending a request to TCP port 443.