PT-2012-3890

CVE-2012-2223

·

Publicado

2012-04-11

·

Atualizado

2017-12-20

Descrição por

CVSS 2.0
4.3
Média
MétricasAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Novell ZENworks Configuration Management (ZCM) versions 10.3.x through 10.3.3 Novell ZENworks Configuration Management (ZCM) versions 11.x through 11.1
Description The issue allows remote attackers to potentially conduct cross-site tracing (XST) attacks via unspecified vectors, as the xplat agent enables the HTTP TRACE method.
Recommendations For versions 10.3.x through 10.3.3, update to version 10.3.4 or later. For versions 11.x through 11.1, update to version 11.2 or later.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Identificadores relacionados
CVE-2012-2223
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com