Directory traversal

2012-11-3019:55:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

67.9%

JSON

Directory traversal vulnerability in LayerLoader.jsp in the theme component in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF19 and 8.0 before CF03 allows remote attackers to read arbitrary files via a crafted URI.

CPENameOperatorVersion
websphere_portaleq7.0.0.1
websphere_portaleq7.0.0.1 cf4
websphere_portaleq8.0.0.0
websphere_portaleq7.0.0.2 cf17
websphere_portaleq7.0.0.1 cf5
websphere_portaleq7.0.0.1 cf6
websphere_portaleq7.0.0.1 cf3
websphere_portaleq7.0.0.2 cf13
websphere_portaleq7.0.0.2 cf15
websphere_portaleq7.0.0.2 cf12

Name	Operator	Version
websphere_portal	eq	7.0.0.1
websphere_portal	eq	7.0.0.1 cf4
websphere_portal	eq	8.0.0.0
websphere_portal	eq	7.0.0.2 cf17
websphere_portal	eq	7.0.0.1 cf5
websphere_portal	eq	7.0.0.1 cf6
websphere_portal	eq	7.0.0.1 cf3
websphere_portal	eq	7.0.0.2 cf13
websphere_portal	eq	7.0.0.2 cf15
websphere_portal	eq	7.0.0.2 cf12