CVE-2012-10048 | Zenoss Core 3.x showdaemonXMLConfig Endpoint ZenossInfo.py Popen daemon path traversal (Exploit 20205 / EDB-20205)

A vulnerability was found in Zenoss Core 3.x. It has been declared as critical. Affected by this vulnerability is the function Popen of the file ZenossInfo.py of the component showdaemonXMLConfig Endpoint. The manipulation of the argument daemon leads to path traversal. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is known as CVE-2012-10048. The attack can be launched remotely. Furthermore, there is an exploit available.