CVE-2015-0779

This Metasploit module exploits an unauthenticated file upload vulnerability in Novell ZENworks Configuration Management (CVE-2015-0779) by abusing directory traversal in the 'uid' parameter to deploy a malicious WAR file in the Tomcat webapps directory, achieving remote code execution.

This exploit leverages a directory traversal vulnerability in Novell ZENworks Configuration Management 11.3.1 to upload a malicious WAR file, achieving remote code execution without authentication. The vulnerability is exploited via a POST request to the UploadServlet with a manipulated 'uid' parameter.

This Metasploit module exploits an unauthenticated file upload vulnerability in Novell ZENworks Configuration Management (ZCM) via directory traversal in the 'uid' parameter of the UploadServlet. It deploys a malicious WAR file to the Tomcat webapps directory, achieving remote code execution.