Security Advisory
CVE-2015-0784
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain Session IDs of logged in users via a value of ShowLogins for the maintenance variable.