Lucene search

K
cve[email protected]CVE-2012-4991
HistoryDec 13, 2012 - 11:53 a.m.

CVE-2012-4991

2012-12-1311:53:00
CWE-22
web.nvd.nist.gov
29
axway securetransport
directory traversal
vulnerability
remote authenticated users
nvd

6.5 Medium

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:C/A:N

0.003 Low

EPSS

Percentile

68.1%

Multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier allow remote authenticated users to (1) read, (2) delete, or (3) create files, or (4) list directories, via a …%5C (encoded dot dot backslash) in a URI.

6.5 Medium

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:C/A:N

0.003 Low

EPSS

Percentile

68.1%