Lucene search
RedhatCVE-2012-1089HistoryMar 23, 2012 - 6:55 p.m.
CVE-2012-1089
2012-03-2318:55:01
CWE-22
redhat
web.nvd.nist.gov
28
cve
2012
1089
directory traversal
vulnerability
apache wicket
web application files
remote attackers
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.9
Confidence
Low
EPSS
0.002
Percentile
57.0%
Directory traversal vulnerability in Apache Wicket 1.4.x before 1.4.20 and 1.5.x before 1.5.5 allows remote attackers to read arbitrary web-application files via a relative pathname in a URL for a Wicket resource that corresponds to a null package.
Affected configurations
Node
apachewicketMatch1.4.0
ORapachewicketMatch1.4.1
ORapachewicketMatch1.4.2
ORapachewicketMatch1.4.3
ORapachewicketMatch1.4.4
ORapachewicketMatch1.4.5
ORapachewicketMatch1.4.6
ORapachewicketMatch1.4.7
ORapachewicketMatch1.4.8
ORapachewicketMatch1.4.9
ORapachewicketMatch1.4.10
ORapachewicketMatch1.4.11
ORapachewicketMatch1.4.12
ORapachewicketMatch1.4.13
ORapachewicketMatch1.4.14
ORapachewicketMatch1.4.15
ORapachewicketMatch1.4.16
ORapachewicketMatch1.4.17
ORapachewicketMatch1.4.18
ORapachewicketMatch1.4.19
Node
apachewicketMatch1.5.0
ORapachewicketMatch1.5.1
ORapachewicketMatch1.5.2
ORapachewicketMatch1.5.3
ORapachewicketMatch1.5.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apache | wicket | 1.4.0 | cpe:2.3:a:apache:wicket:1.4.0:*:*:*:*:*:*:* |
| apache | wicket | 1.4.1 | cpe:2.3:a:apache:wicket:1.4.1:*:*:*:*:*:*:* |
| apache | wicket | 1.4.2 | cpe:2.3:a:apache:wicket:1.4.2:*:*:*:*:*:*:* |
| apache | wicket | 1.4.3 | cpe:2.3:a:apache:wicket:1.4.3:*:*:*:*:*:*:* |
| apache | wicket | 1.4.4 | cpe:2.3:a:apache:wicket:1.4.4:*:*:*:*:*:*:* |
| apache | wicket | 1.4.5 | cpe:2.3:a:apache:wicket:1.4.5:*:*:*:*:*:*:* |
| apache | wicket | 1.4.6 | cpe:2.3:a:apache:wicket:1.4.6:*:*:*:*:*:*:* |
| apache | wicket | 1.4.7 | cpe:2.3:a:apache:wicket:1.4.7:*:*:*:*:*:*:* |
| apache | wicket | 1.4.8 | cpe:2.3:a:apache:wicket:1.4.8:*:*:*:*:*:*:* |
| apache | wicket | 1.4.9 | cpe:2.3:a:apache:wicket:1.4.9:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2012-1089
2012-03-23 18:00:00
seebug
seebug
Apache Wicketιθζδ»ΆδΏ‘ζ―ζ³ι²ζΌζ΄
2012-03-23 00:00:00
prion
prion
Directory traversal
2012-03-23 18:55:00
nvd
nvd
CVE-2012-1089
2012-03-23 18:55:01
securityvulns
securityvulns
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.9
Confidence
Low
EPSS
0.002
Percentile
57.0%
Related for CVE-2012-1089