NVD

Id
43257  
Name
CVE-2012-1289  
Description
Multiple directory traversal vulnerabilities in SAP NetWeaver 7.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the logfilename parameter to (1) b2b/admin/log.jsp or (2) b2b/admin/log_view.jsp in the Internet Sales (crm.b2b) component, or (3) ipc/admin/log.jsp or (4) ipc/admin/log_view.jsp in the Application Administration (com.sap.ipc.webapp.ipc) component.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-02-23  
Modified Date
2012-02-24  
Seq
2012-1289  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
217730 43257 CVE-2012-1289 http://dsecrg.com/pages/vul/show.php?id=412  View
217731 43257 CVE-2012-1289 http://dsecrg.com/pages/vul/show.php?id=413  View
217732 43257 CVE-2012-1289 http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a  View
217733 43257 CVE-2012-1289 52101  View
217734 43257 CVE-2012-1289 netweaver-logview-directory-traversal(73346)  View
217735 43257 CVE-2012-1289 https://service.sap.com/sap/support/notes/1585527  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25862 JVNDB-2012-001569 SAP NetWeaver におけるディレクトリトラバーサルの脆弱性 SAP NetWeaver には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2012-1289 54527 CVE-2012-1289 43257 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001569.html 2012-02-23 2012-02-27 View