Novell ZENWorks Asset Management CVE-2012-4933 Information Disclosure Vulnerability

Bugtraq ID:	55933
Class:	Design Error
CVE:	CVE-2012-4933
Remote:	Yes
Local:	No
Published:	Oct 15 2012 12:00AM
Updated:	Oct 15 2012 12:00AM
Credit:	Juan Vazquez
Vulnerable:	Novell ZENworks Asset Management 7.5
Not Vulnerable:

Novell ZENWorks Asset Management CVE-2012-4933 Information Disclosure Vulnerability

Novell ZENWorks Asset Management is prone to an information-disclosure vulnerability.

Successful exploit of this issue allows an attacker to obtain sensitive information that may aid in further attacks.

Novell ZENWorks Asset Management CVE-2012-4933 Information Disclosure Vulnerability

Attackers can use a browser to exploit this issue.

The following exploit codes are available:

• /data/vulnerabilities/exploits/55933.rb
• /data/vulnerabilities/exploits/55933_1.rb

Novell ZENWorks Asset Management CVE-2012-4933 Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Novell ZENWorks Asset Management CVE-2012-4933 Information Disclosure Vulnerability

References:

• New 0day Exploit: Novell ZENworks CVE-2012-4933 Vulnerability (Juan Vazquez)
  
• ZENworks Asset Management Homepage (Novell)