Lucene search
HistoryMar 23, 2012 - 6:55 p.m.
CVE-2012-1089
cve
2012
1089
directory traversal
vulnerability
apache wicket
web application files
remote attackers
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
57.1%
Directory traversal vulnerability in Apache Wicket 1.4.x before 1.4.20 and 1.5.x before 1.5.5 allows remote attackers to read arbitrary web-application files via a relative pathname in a URL for a Wicket resource that corresponds to a null package.
Affected configurations
Node
apachewicketMatch1.4.0
ORapachewicketMatch1.4.1
ORapachewicketMatch1.4.2
ORapachewicketMatch1.4.3
ORapachewicketMatch1.4.4
ORapachewicketMatch1.4.5
ORapachewicketMatch1.4.6
ORapachewicketMatch1.4.7
ORapachewicketMatch1.4.8
ORapachewicketMatch1.4.9
ORapachewicketMatch1.4.10
ORapachewicketMatch1.4.11
ORapachewicketMatch1.4.12
ORapachewicketMatch1.4.13
ORapachewicketMatch1.4.14
ORapachewicketMatch1.4.15
ORapachewicketMatch1.4.16
ORapachewicketMatch1.4.17
ORapachewicketMatch1.4.18
ORapachewicketMatch1.4.19
Node
apachewicketMatch1.5.0
ORapachewicketMatch1.5.1
ORapachewicketMatch1.5.2
ORapachewicketMatch1.5.3
ORapachewicketMatch1.5.4
Related
seebug
seebug
Apache Wicketιθζδ»ΆδΏ‘ζ―ζ³ι²ζΌζ΄
2012-03-23 00:00:00
nvd
nvd
CVE-2012-1089
2012-03-23 18:55:01
prion
prion
Directory traversal
2012-03-23 18:55:00
cvelist
cvelist
CVE-2012-1089
2012-03-23 18:00:00
securityvulns
securityvulns
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
57.1%
Related for CVE-2012-1089