CVE-2012-4834 in WebSphere

Resumen (Inglés)

Directory traversal vulnerability in LayerLoader.jsp in the theme component in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF19 and 8.0 before CF03 allows remote attackers to read arbitrary files via a crafted URI.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2012-09-06

Divulgación

2012-11-30

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
6994	IBM WebSphere IBM WebSphere Portal recorrido de directorios	22	Alto	Arreglo oficial	CVE-2012-4834

Fuentes

• MITRE
• NVD
• CVE Details