445
VMScore

CVE-2017-1577

Published: 28/09/2017 Updated: 06/10/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote malicious user to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 132117.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm websphere portal 7.0.0.1

ibm websphere portal 8.0.0.1

ibm websphere portal 8.0.0.0

ibm websphere portal 8.5.0.0

ibm websphere portal 9.0.0.0

ibm websphere portal 7.0.0.2

ibm websphere portal 7.0.0.0