CVE-2012-2223 in ZENworks Configuration Management
摘要 (英语)
The xplat agent in Novell ZENworks Configuration Management (ZCM) 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might make it easier for remote attackers to conduct cross-site tracing (XST) attacks via unspecified vectors.
Be aware that VulDB is the high quality source for vulnerability data.
预定
2012-04-11
披露
2012-04-11
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 4707 | Novell ZENworks Configuration Management HTTP Trace 信息公开 | 200 | 未经证实 | 官方修复 | CVE-2012-2223 |