CVE-2013-3706: Directory traversal vulnerability in the PreBoot service in Novell ZENworks Configuration Management (ZCM)...

Security readout for executives and security teams

CVE-2013-3706 is a remote directory traversal issue in the PreBoot service of Novell ZENworks Configuration Management 11.2. An attacker could read files from the server by manipulating a preboot update pathname. The public bundle does not include CVSS, patch text, or confirmed exploitation, so urgency depends on whether this legacy service remains reachable. Organizations may be exposed if they still run Novell ZENworks Configuration Management 11.2 with the PreBoot service enabled and reachable by untrusted networks. Evidence is insufficient to extend affected scope beyond ZCM 11.2. Treat this as a targeted legacy-platform exposure check. It could expose sensitive server files if vulnerable ZCM 11.2 PreBoot services are reachable, but the provided record lacks severity scoring, fixed-version details, and evidence of active exploitation. Mitigation focus: Identify any ZENworks Configuration Management 11.2 deployments and enabled PreBoot services.; Check Novell, Micro Focus, or OpenText guidance for fixed versions or supported workarounds.; Restrict PreBoot service access to trusted management and deployment networks only..

Prepared

Jun 14, 2026, 14:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.