PT-2012-3890
CVE-2012-2223
·
Published
2012-04-11
·
Updated
2017-12-20
Description by
CVSS 2.0
4.3
MediumMetricsAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Novell ZENworks Configuration Management (ZCM) versions 10.3.x through 10.3.3
Novell ZENworks Configuration Management (ZCM) versions 11.x through 11.1
Description
The issue allows remote attackers to potentially conduct cross-site tracing (XST) attacks via unspecified vectors, as the xplat agent enables the HTTP TRACE method.
Recommendations
For versions 10.3.x through 10.3.3, update to version 10.3.4 or later.
For versions 11.x through 11.1, update to version 11.2 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾