medium5.3
CVE-2015-5970
The ChangePassword RPC method in Novell ZENworks Configuration Management (ZCM) 11.3 and 11.4 allows remote attackers to conduct XPath injection attacks, and r…
Impact
The ChangePassword RPC method in Novell ZENworks Configuration Management (ZCM) 11.3 and 11.4 allows remote attackers to conduct XPath injection attacks, and read arbitrary text files, via a malformed query involving a system entity reference.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Novell | Zenworks Configuration Management | Versions 11.3.0, 11.3.1, 11.3.2, 11.4.0, 11.4.1 |