CVE-2012-2202 Directory traversal vulnerability in javatester_init.php in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allows remote authenticate...
LowCVSS 3.5
EPSS 3.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in javatester_init.php in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the template parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm lotus protector for mail security | = 2.1 | No fix listed |
| ibm lotus protector for mail security | = 2.5 | No fix listed |
| ibm lotus protector for mail security | = 2.5.1 | No fix listed |
| ibm lotus protector for mail security | = 2.8 | No fix listed |
| ibm proventia network mail security system firmware | = 2.5 | No fix listed |
| ibm proventia network mail security system firmware | = 2.5.0.2 | No fix listed |
| ibm proventia network mail security system firmware | = 2.5.1 | No fix listed |
| ibm proventia network mail security system firmware | = 2.6 | No fix listed |
| ibm proventia network mail security system firmware | = 2.8 | No fix listed |
References
- 49897 third-party-advisory
- www-01.ibm.com
- VU#659791 third-party-advisory us-government-resource
- pnm-javatesterinit-dir-traversal(76801) vdb-entry