CVE-2010-5323: Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Co...

Security readout for executives and security teams

This is an old but serious Novell ZENworks Configuration Management flaw. A remote attacker could abuse the Remote Management upload function to place WAR content through a directory traversal issue, leading to arbitrary code execution. The supplied sources do not show current active exploitation, but they do include a public exploit reference. Exposure is most likely in legacy ZCM 10 environments older than 10.3 where the Remote Management UploadServlet remains reachable. Internet-facing or broadly reachable management interfaces would increase business risk, but the supplied bundle does not confirm common exposure patterns. Prioritize remediation if legacy ZCM 10 remains operational, especially where remote management is reachable beyond a restricted admin network. The issue enables remote code execution, but the supplied evidence does not show current active exploitation. Mitigation focus: Upgrade ZCM 10 deployments to version 10.3 or later.; Review Novell vendor guidance for the historical fix details.; Restrict access to Remote Management interfaces to trusted administration networks..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.