The remote host has a version of Novell ZENworks Configuration Management installed prior to 11.2.3a Monthly Update 1. It is, therefore, affected by the following vulnerabilities:

  - An open redirect vulnerability exists on the ZENworks Control Center login page due to improper validation of the 'fwdToURL' parameter. (CVE-2013-1093)

  - ZENworks Control Center Login.jsp スクリプトが、「language」パラメーターの検証が不適切なため存在するクロスサイトスクリプティングの脆弱性の影響を受けます。
    (CVE-2013-1094)

  - A cross-site scripting vulnerability exists due to improper validation of input when handling 'onError' events. (CVE-2013-1095)

  - A cross-site scripting vulnerability exists due to improper validation of input when handling frame tag 'onload' events. (CVE-2013-1097)

検出

Novell ZENworks Configuration Management < 11.2.3a Monthly Update 1 における複数の脆弱性（credentialed check）

medium Nessus プラグイン ID 66913

変更ログが見つかりません