CVE-2015-0779: Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and...

Security readout for executives and security teams

CVE-2015-0779 is a remote code execution issue in Novell ZENworks Configuration Management. A vulnerable upload component can be abused through path traversal behavior to place executable web content. Organizations still running ZCM 10 or 11 before 11.3.2 should treat this as urgent, especially if reachable from untrusted networks. Exposure is most likely in legacy Novell ZCM deployments, especially management servers accessible from the internet, partner networks, or broad internal segments. The provided affected-products metadata is incomplete, so asset validation should rely on installed ZCM versions and vendor documentation. Prioritize remediation where ZCM is still present. This is old, but public exploit material and remote code execution impact make lingering legacy exposure a high business risk, particularly for systems with administrative reach into endpoint management. Mitigation focus: Upgrade Novell ZCM 10 or 11 deployments to 11.3.2 or later.; Check Novell vendor guidance for supported fixes and upgrade prerequisites.; Restrict access to ZCM management interfaces from untrusted networks..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.