7.5

CVE-2004-2478

EPSS 2.42%
Veröffentlicht 31.12.2004 05:00:00
Zuletzt bearbeitet 16.06.2026 22:09:43
Erkennungen
Login

Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 14

NVD 21 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ca ≫ Unicenter Web Services Distributed Management Version <= 3.1

Ibm ≫ Trading Partner Interchange Version <= 4.2.2

Ibm ≫ Trading Partner Interchange Version 4.2.1

Jetty ≫ Jetty Http Server Version 3.1.6

Jetty ≫ Jetty Http Server Version 3.1.7

Jetty ≫ Jetty Http Server Version 4.1.0

Jetty ≫ Jetty Http Server Version 4.1.0_rc4

Jetty ≫ Jetty Http Server Version 4.1.1

Jetty ≫ Jetty Http Server Version 4.2.4

Jetty ≫ Jetty Http Server Version 4.2.5

Jetty ≫ Jetty Http Server Version 4.2.6

Jetty ≫ Jetty Http Server Version 4.2.7

Jetty ≫ Jetty Http Server Version 4.2.9

Jetty ≫ Jetty Http Server Version 4.2.11

Jetty ≫ Jetty Http Server Version 4.2.12

Jetty ≫ Jetty Http Server Version 4.2.14

Jetty ≫ Jetty Http Server Version 4.2.15

Jetty ≫ Jetty Http Server Version 4.2.16

Jetty ≫ Jetty Http Server Version 4.2.17

Jetty ≫ Jetty Http Server Version 4.2.18

Jetty ≫ Jetty Http Server Version 4.2.19

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.42%	0.82

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049846.html

http://secunia.com/advisories/12703

Vendor Advisory

http://secunia.com/advisories/22229

Vendor Advisory

http://securitytracker.com/id?1011545

http://securitytracker.com/id?1016975

http://www-1.ibm.com/support/docview.wss?uid=swg21178665

Vendor Advisory

http://www.osvdb.org/10490

http://www.securityfocus.com/archive/1/447648/100/0/threaded

http://www.securityfocus.com/bid/11330

http://www.vupen.com/english/advisories/2006/3873

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/17600

https://nvd.nist.gov/vuln/detail/CVE-2004-2478

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-2478

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-2478

EUVD