PT-2013-6005 · Novell · Novell Zenworks Configuration Management

Publicado 2013-11-02 · Atualizado 2013-11-05 · CVE-2013-6344

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Novell ZENworks Configuration Management (ZCM) versions prior to 11.2.4

Description The issue allows attackers to conduct cross-frame scripting attacks. This is related to the ZCC page in Novell ZENworks Configuration Management.

Recommendations For versions prior to 11.2.4, update to version 11.2.4 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-6344

Produtos afetados

Novell Zenworks Configuration Management

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-6344 · Nota de Segurança
• http://novell.com/support/kb/doc.php?id=7012027 · Nota