CVE-2015-0779

CVE-2015-0779 is a critical directory traversal vulnerability in the UploadServlet of Novell ZENworks Configuration Management (ZCM) versions 10 and 11 prior to 11.3.2. This flaw allows unauthenticated remote attackers to upload arbitrary files, including WAR files, by manipulating the uid and filename parameters. With a CVSS score of 10.0, this vulnerability is easily exploitable over the network with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. Exploit code, including Metasploit modules and ExploitDB entries, is publicly available, indicating a high potential for exploitation, though there is no evidence of active exploitation or significant community discussion.