PT-2012-2384 · Ibm+1 · Ibm Lotus Expeditor+1
Published
2012-06-22
·
Updated
2017-08-29
·
CVE-2012-0186
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Lotus Expeditor versions 6.1.x through 6.2.x before 6.2 FP5+Security Pack
Description
The issue allows remote attackers to discover the locations of files via a crafted URL, due to a directory traversal vulnerability in the Eclipse Help component.
Recommendations
For versions 6.1.x through 6.2.x before 6.2 FP5+Security Pack, update to version 6.2 FP5+Security Pack or later to resolve the issue.
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Eclipse Help
Ibm Lotus Expeditor