CVE-2013-6346

Published: Nov 2, 2013Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected (9)

Products: Novell: Zenworks Configuration Management

Novell

1 product

Zenworks Configuration Management

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Novell Zenworks Configuration Management	Up to 11.2.3
Novell Zenworks Configuration Management	Version 10.2
Novell Zenworks Configuration Management	Version 10.3.1
Novell Zenworks Configuration Management	Version 10.3.2
Novell Zenworks Configuration Management	Version 10.3.3
Novell Zenworks Configuration Management	Version 10.3
Novell Zenworks Configuration Management	Version 11.2
Novell Zenworks Configuration Management	Version 11
Novell Zenworks Configuration Management	Version 11 sp1

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (2)

http://www.novell.com/support/kb/doc.php?id=7012027

Source: cve@mitre.org

http://www.novell.com/support/kb/doc.php?id=7012027

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.