EUVD-2012-2175

Malware in sbrugna...

IBM WebSphere Portal Dojo Module Arbitrary File Download

The version of WebSphere Portal on the remote host is using a vulnerable version of the Dojo toolkit. Input to the 'path' parameter of layerLoader.jsp is not properly validated. A remote, unauthenticated attacker could exploit this to download arbitrary files. This vulnerability exists due to an...

IBM WebSphere Portal Dojo Module URI Traversal Arbitrary File Access

The version of WebSphere Portal on the remote host is using a vulnerable version of the Dojo toolkit. Input to the 'path' parameter of layerLoader.jsp is not properly validated. A remote, unauthenticated attacker could exploit this to download arbitrary files. %NASLMINLEVEL 70300 C Tenable Networ...

PT-2012-3862

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.0.0.1 through 7.0.0.2 before CF14 IBM WebSphere Portal version 8.0 Description A directory traversal issue in the Dojo module allows remote attackers to read arbitrary files via a crafted URL. Recommendations Fo...

CVE-2012-2181: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Dojo module in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF14, and 8.0, allows remote attackers to read arbitrary files via a crafted URL...