CVE

Id
54532  
CVE No.
CVE-2012-1289  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in SAP NetWeaver 7.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the logfilename parameter to (1) b2b/admin/log.jsp or (2) b2b/admin/log_view.jsp in the Internet Sales (crm.b2b) component, or (3) ipc/admin/log.jsp or (4) ipc/admin/log_view.jsp in the Application Administration (com.sap.ipc.webapp.ipc) component.  
Phase
Assigned (20120223)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
572423 54532 CVE-2012-1289 MISC:http://dsecrg.com/pages/vul/show.php?id=412  View
572424 54532 CVE-2012-1289 MISC:http://dsecrg.com/pages/vul/show.php?id=413  View
572425 54532 CVE-2012-1289 MISC:https://service.sap.com/sap/support/notes/1585527  View
572426 54532 CVE-2012-1289 CONFIRM:http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a  View
572427 54532 CVE-2012-1289 BID:52101  View
572428 54532 CVE-2012-1289 URL:http://www.securityfocus.com/bid/52101  View
572429 54532 CVE-2012-1289 SECUNIA:47861  View
572430 54532 CVE-2012-1289 URL:http://secunia.com/advisories/47861  View
572431 54532 CVE-2012-1289 XF:netweaver-logview-directory-traversal(73346)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33454 JVNDB-2011-003694 CONTIMEX Impulsio CMS における SQL インジェクションの脆弱性 CONTIMEX Impulsio CMS には、SQL インジェクションの脆弱性が存在します。 CVE-2012-1294 54532 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003694.html  View