CVE-2012-2215

CVE-2012-2215 is a directory traversal vulnerability in the Preboot Service of Novell ZENworks Configuration Management (ZCM) versions 11.1 and 11.1a. This flaw allows an unauthenticated remote attacker to read arbitrary files on the affected system by sending a specially crafted opcode 0x21 request. With a CVSS score of 5.0, it is considered a medium-severity vulnerability, as it permits unauthorized information disclosure without requiring authentication or complex attack methods. While not observed in active exploitation, exploit modules are available in Metasploit, indicating a clear path for potential attackers, despite a lack of broader community discussion or media coverage.