CVE-2012-2223

Published: Apr 11, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The xplat agent in Novell ZENworks Configuration Management (ZCM) 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might make it easier for remote attackers to conduct cross-site tracing (XST) attacks via unspecified vectors.

Affected (7)

Products: Novell: Zenworks Configuration Management

Novell

1 product

Zenworks Configuration Management

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Novell Zenworks Configuration Management	Version 10.3.1
Novell Zenworks Configuration Management	Version 10.3.2
Novell Zenworks Configuration Management	Version 10.3.3
Novell Zenworks Configuration Management	Version 10.3
Novell Zenworks Configuration Management	Version 11.1
Novell Zenworks Configuration Management	Version 11.1a
Novell Zenworks Configuration Management	Version 11