PT-2012-3890
CVE-2012-2223
·
تاريخ النشر
2012-04-11
·
تاريخ التحديث
2017-12-20
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Novell ZENworks Configuration Management (ZCM) versions 10.3.x through 10.3.3
Novell ZENworks Configuration Management (ZCM) versions 11.x through 11.1
Description
The issue allows remote attackers to potentially conduct cross-site tracing (XST) attacks via unspecified vectors, as the xplat agent enables the HTTP TRACE method.
Recommendations
For versions 10.3.x through 10.3.3, update to version 10.3.4 or later.
For versions 11.x through 11.1, update to version 11.2 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾