Lucene search

K
nvd[email protected]NVD:CVE-2012-1471
HistoryOct 01, 2012 - 11:55 p.m.

CVE-2012-1471

2012-10-0123:55:00
CWE-22
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

81.0%

Directory traversal vulnerability in catalogue_file.php in ocPortal before 7.1.6 allows remote attackers to read arbitrary files via a … (dot dot) in the file parameter.

Affected configurations

NVD
Node
ocportalocportalRange7.1.5
OR
ocportalocportalMatch4.0
OR
ocportalocportalMatch4.0.1
OR
ocportalocportalMatch4.0.2
OR
ocportalocportalMatch4.0.3
OR
ocportalocportalMatch4.0.4
OR
ocportalocportalMatch4.0.5
OR
ocportalocportalMatch4.1
OR
ocportalocportalMatch4.1.1
OR
ocportalocportalMatch4.1.2
OR
ocportalocportalMatch4.1.3
OR
ocportalocportalMatch4.1.4
OR
ocportalocportalMatch4.1.5
OR
ocportalocportalMatch4.1.6
OR
ocportalocportalMatch4.1.8
OR
ocportalocportalMatch4.1.9
OR
ocportalocportalMatch4.1.10
OR
ocportalocportalMatch4.1.11
OR
ocportalocportalMatch4.1.12
OR
ocportalocportalMatch4.1.13
OR
ocportalocportalMatch4.2
OR
ocportalocportalMatch4.2beta1
OR
ocportalocportalMatch4.2beta2
OR
ocportalocportalMatch4.2rc1
OR
ocportalocportalMatch4.2rc2
OR
ocportalocportalMatch4.2rc3
OR
ocportalocportalMatch4.2.1
OR
ocportalocportalMatch4.2.2
OR
ocportalocportalMatch4.3
OR
ocportalocportalMatch4.3rc1
OR
ocportalocportalMatch4.3rc2
OR
ocportalocportalMatch4.3rc3
OR
ocportalocportalMatch4.3.1
OR
ocportalocportalMatch4.3.2
OR
ocportalocportalMatch5.0
OR
ocportalocportalMatch5.0rc1
OR
ocportalocportalMatch5.0.1
OR
ocportalocportalMatch5.0.2
OR
ocportalocportalMatch5.0.2beta1
OR
ocportalocportalMatch5.0.3
OR
ocportalocportalMatch5.1beta1
OR
ocportalocportalMatch6.0
OR
ocportalocportalMatch6.0beta1
OR
ocportalocportalMatch6.0beta2
OR
ocportalocportalMatch6.0rc1
OR
ocportalocportalMatch6.0rc2
OR
ocportalocportalMatch6.0rc3
OR
ocportalocportalMatch6.0.1
OR
ocportalocportalMatch6.0.2
OR
ocportalocportalMatch6.0.3
OR
ocportalocportalMatch6.1
OR
ocportalocportalMatch6.1.1
OR
ocportalocportalMatch6.2rc1
OR
ocportalocportalMatch7.0
OR
ocportalocportalMatch7.0.1
OR
ocportalocportalMatch7.1
OR
ocportalocportalMatch7.1beta1
OR
ocportalocportalMatch7.1.1
OR
ocportalocportalMatch7.1.2
OR
ocportalocportalMatch7.1.3
OR
ocportalocportalMatch7.1.4

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

81.0%

Related for NVD:CVE-2012-1471