Multiple directory traversal vulnerabilities in SAP NetWeaver 7.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the logfilename parameter to (1) b2b/admin/log.jsp or (2) b2b/admin/log_view.jsp in the Internet Sales (crm.b2b) component, or (3) ipc/admin/log.jsp or (4) ipc/admin/log_view.jsp in the Application Administration (com.sap.ipc.webapp.ipc) component.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2012-02-23T18:00:00

Updated: 2024-08-06T18:53:36.913Z

Reserved: 2012-02-23T00:00:00

Link: CVE-2012-1289

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2012-02-23T20:07:25.860

Modified: 2024-11-21T01:36:46.600

Link: CVE-2012-1289

cve-icon Redhat

No data.