CVEvulnerability

CVE-2012-5972

5.0 MEDIUM Published 2013-01-17 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2013-01-17
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 2.6 LOW — AV:N/AC:H/Au:N/C:P/I:N/A:N
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses: CWE-22, CWE-23

Description

Directory traversal vulnerability in the web server in SpecView 2.5 build 853 and earlier allows remote attackers to read arbitrary files via a ... (dot dot dot) in a URI.

Affected configurations

• specview specview (<= 2.5)

Weakness · CWE (2)

CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
CWE-23 Relative Path Traversal weakness

References

http://aluigi.altervista.org/adv/specview_1-adv.txt Exploit
https://www.cisa.gov/news-events/ics-advisories/icsa-13-011-02 www.cisa.gov
http://aluigi.altervista.org/adv/specview_1-adv.txt Exploit
http://www.us-cert.gov/control_systems/pdf/ICSA-13-011-02.pdf US Government Resource

CVE-2012-5972

Description

Affected configurations

Related

Weakness · CWE (2)

References