NVD

Id
72855  
Name
CVE-2004-2478  
Description
Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-12-31  
Modified Date
2017-07-10  
Seq
2004-2478  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
375309 72855 CVE-2004-2478 20061003 [CAID 34661]: CA Unicenter WSDM File System Read Access Vulnerability  View
375310 72855 CVE-2004-2478 1011545  View
375311 72855 CVE-2004-2478 1016975  View
375312 72855 CVE-2004-2478 http://www-1.ibm.com/support/docview.wss?uid=swg21178665  View
375313 72855 CVE-2004-2478 20061003 [CAID 34661]: CA Unicenter WSDM File System Read Access Vulnerability  View
375314 72855 CVE-2004-2478 11330  View
375315 72855 CVE-2004-2478 ADV-2006-3873  View
375316 72855 CVE-2004-2478 trading-partner-gain-access(17600)  View

Related JVN