Unscored severity · published Nov 30, 2012
CVE-2012-4834
Directory traversal vulnerability in LayerLoader.jsp in the theme component in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF19 and 8.0 before CF03 allows remote attackers to…
–
CVSS
3.1%
EPSS
No
On KEV
Description
Directory traversal vulnerability in LayerLoader.jsp in the theme component in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF19 and 8.0 before CF03 allows remote attackers to read arbitrary files via a crafted URI.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WP
Websphere Portal · Ibm
7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +33 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-4834
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-4834
Third Party Advisory
http://secunia.com/advisories/51281
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PM76354
Patch
http://www.ibm.com/connections/blogs/PSIRT/entry/security_vulnerability_in_theme_component_for_websphere_portal_versions_7_0_0_x_and_8_0_cve2012_48344
Patch
http://www.ibm.com/support/docview.wss?uid=swg21617713
Patch
http://www.ibm.com/support/docview.wss?uid=swg24033155
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/78914
More from Websphere Portal
8.8
CVE-2017-1156
IBM WebSphere Portal 8.5 and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
8.8
CVE-2016-2901
Cross-site request forgery (CSRF) vulnerability in the PA_Theme_Creator application in IBM WebSphere Portal 8.5 CF08 through CF10 and Web Content Manager allows remote attackers…
7.8
CVE-2013-2951
IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portlet (Profile Management), which allows local users to obtain…
7.5
CVE-2017-1577
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system
7.4
CVE-2015-7428
Open redirect vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to redirect users to arbitrary web sites and…