Design/Logic Flaw

2016-06-1901:59:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.3%

JSON

NTT Data TERASOLUNA Server Framework for Java(WEB) 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allows remote attackers to bypass a file-extension protection mechanism, and consequently read arbitrary files, via a crafted pathname.

CPENameOperatorVersion
terasoluna_server_framework_for_java_webeq2.0.2.0
terasoluna_server_framework_for_java_webeq2.0.1.0
terasoluna_server_framework_for_java_webeq2.0.6.1
terasoluna_server_framework_for_java_webeq2.0.5.1
terasoluna_server_framework_for_java_webeq2.0.5.3
terasoluna_server_framework_for_java_webeq2.0.0.1
terasoluna_server_framework_for_java_webeq2.0.0.2
terasoluna_server_framework_for_java_webeq2.0.5.2

Name	Operator	Version
terasoluna_server_framework_for_java_web	eq	2.0.2.0
terasoluna_server_framework_for_java_web	eq	2.0.1.0
terasoluna_server_framework_for_java_web	eq	2.0.6.1
terasoluna_server_framework_for_java_web	eq	2.0.5.1
terasoluna_server_framework_for_java_web	eq	2.0.5.3
terasoluna_server_framework_for_java_web	eq	2.0.0.1
terasoluna_server_framework_for_java_web	eq	2.0.0.2
terasoluna_server_framework_for_java_web	eq	2.0.5.2