CVE-2004-0465

OpenConnect WebConnect (WebConnect 6.4.4, 6.5 and possibly earlier) is vulnerable to a read-only directory traversal in the jretest.html page. By sending a crafted request that abuses the WCP_USER parameter (using ..// sequences), an attacker can read INI-style files outside the webroot and view ...

CVE-2004-0465

Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" sequences in the WCPUSER parameter...

CVE-2004-0465

Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" sequences in the WCPUSER parameter...