CVE-2004-2478 in HTTP Server

الملخص

بحسب MITRE

Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• حجز: 21/08/2005
• إفشاء: 31/12/2004
• الاعتدال: تمت الموافقة
• إدخال: VDB-23364
• CPE: جاهز
• CWE: CWE-22 (مؤكد)
• CVSS: 7.3 (VulDB)
• EPSS: 0.02423
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Hospital, Government, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-2478
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-2478
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-2478/