The FileViewer class in Novell ZENworks Configuration Management (ZCM) allows remote authenticated users to read arbitrary files via the filename variable.
https://www.novell.com/support/kb/doc.php?id=7016431
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-0796