CVE-2012-5100

MEDIUM

Description

Directory traversal vulnerability in HServer 0.1.1 allows remote attackers to read arbitrary files via a (1) ..%5c (dot dot encoded backslash) or (2) %2e%2e%5c (encoded dot dot backslash) in the PATH_INFO.

References

http://archives.neohapsis.com/archives/bugtraq/2012-01/0028.html

http://www.securityfocus.com/bid/51286

https://exchange.xforce.ibmcloud.com/vulnerabilities/72138

Details

Source: MITRE

Published: 2012-09-23

Updated: 2017-08-29

Type: CWE-22

Risk Information

CVSS v2.0

Base Score: 5

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Impact Score: 2.9

Exploitability Score: 10

Severity: MEDIUM