CVE-2013-1080

CVE-2013-1080 describes an authentication bypass vulnerability in the web server of Novell ZENworks Configuration Management (ZCM) versions 10.3 and 11.2 prior to 11.2.4. This flaw allows unauthenticated remote attackers to perform directory traversal attacks via TCP port 443, leading to the upload and execution of arbitrary programs. With a CVSS score of 10.0, this vulnerability is critical, enabling full compromise of confidentiality, integrity, and availability with low attack complexity and no authentication required. While not listed in CISA's KEV catalog, exploit code, including a Metasploit module, is publicly available, though there is no evidence of widespread active exploitation or significant community discussion.