Lucene search

K
cve[email protected]CVE-2012-0410
HistoryJul 05, 2012 - 2:55 p.m.

CVE-2012-0410

2012-07-0514:55:01
CWE-22
web.nvd.nist.gov
27
cve
2012
0410
directory traversal
vulnerability
novell
groupwise
webaccess
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.642 Medium

EPSS

Percentile

97.9%

Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrary files via the User.interface parameter.

Affected configurations

NVD
Node
novellgroupwiseRange8.02hp3
OR
novellgroupwiseMatch5.2
OR
novellgroupwiseMatch5.5
OR
novellgroupwiseMatch5.57e
OR
novellgroupwiseMatch6.0
OR
novellgroupwiseMatch6.0.1sp1
OR
novellgroupwiseMatch6.5
OR
novellgroupwiseMatch6.5sp1
OR
novellgroupwiseMatch6.5sp2
OR
novellgroupwiseMatch6.5sp3
OR
novellgroupwiseMatch6.5sp4
OR
novellgroupwiseMatch6.5sp5
OR
novellgroupwiseMatch6.5sp6
OR
novellgroupwiseMatch6.5.2
OR
novellgroupwiseMatch6.5.3
OR
novellgroupwiseMatch6.5.4
OR
novellgroupwiseMatch6.5.6
OR
novellgroupwiseMatch6.5.7
OR
novellgroupwiseMatch7.0
OR
novellgroupwiseMatch7.0.3hp4
OR
novellgroupwiseMatch7.0.3hp5
OR
novellgroupwiseMatch7.0.4
OR
novellgroupwiseMatch7.0.4ftf
OR
novellgroupwiseMatch7.01
OR
novellgroupwiseMatch7.01ir1
OR
novellgroupwiseMatch7.02
OR
novellgroupwiseMatch7.02hp1
OR
novellgroupwiseMatch7.02hp1a
OR
novellgroupwiseMatch7.02hp2
OR
novellgroupwiseMatch7.02hp2r1
OR
novellgroupwiseMatch7.03
OR
novellgroupwiseMatch7.03hp
OR
novellgroupwiseMatch7.03hp2
OR
novellgroupwiseMatch7.03hp3
OR
novellgroupwiseMatch7.03hp3\+ftf
OR
novellgroupwiseMatch8.0
OR
novellgroupwiseMatch8.00hp1
OR
novellgroupwiseMatch8.00hp2
OR
novellgroupwiseMatch8.01
OR
novellgroupwiseMatch8.01hp
OR
novellgroupwiseMatch8.02
OR
novellgroupwiseMatch8.02hp1
OR
novellgroupwiseMatch8.02hp2

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.642 Medium

EPSS

Percentile

97.9%

Related for CVE-2012-0410