Security Advisory

CVE-2015-5970

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-02-18 22:00:00

Last updated 2024-08-06 07:06:34

Assigner microfocus

CVSS score not scored

State PUBLISHED

Description

The ChangePassword RPC method in Novell ZENworks Configuration Management (ZCM) 11.3 and 11.4 allows remote attackers to conduct XPath injection attacks, and read arbitrary text files, via a malformed query involving a system entity reference.

← Browse all CVEs View on cve.org ↗