CVEvulnerability
CVE-2012-4834
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-11-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in LayerLoader.jsp in the theme component in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF19 and 8.0 before CF03 allows remote attackers to read arbitrary files via a crafted URI.
Affected configurations
• ibm websphere portal 7.0.0.1
• ibm websphere portal 7.0.0.2
• ibm websphere portal 8.0.0.0
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://secunia.com/advisories/51281 Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM76354 Vendor Advisory
- http://www.ibm.com/connections/blogs/PSIRT/entry/security_vulnerability_in_theme_component_for_websphere_portal_versions_7_0_0_x_and_8_0_cve2012_48344 Patch, Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21617713 Patch, Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg24033155 Patch, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78914 Third Party Advisory, VDB Entry
- http://secunia.com/advisories/51281 Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM76354 Vendor Advisory
- http://www.ibm.com/connections/blogs/PSIRT/entry/security_vulnerability_in_theme_component_for_websphere_portal_versions_7_0_0_x_and_8_0_cve2012_48344 Patch, Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21617713 Patch, Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg24033155 Patch, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78914 Third Party Advisory, VDB Entry