CVE-2013-1084: Novell Zenworks Configuration Management

Medium severity, CVSS 5.0. EPSS: 5.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the GetFle method in the umaninv service in Novell ZENworks Configuration Management (ZCM) 11.2.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the Filename parameter in a GetFile action to zenworks-unmaninv/.

Affected products

• Novell Zenworks Configuration Management: version 11.2.3 only

Published 2013-11-02. Last modified 2026-06-16.