CVE-2012-4834: Path Traversal
Directory traversal vulnerability in LayerLoader.jsp in the theme component in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF19 and 8.0 before CF03 allows remote attackers to read arbitrary files via a crafted URI.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4834?
CVE-2012-4834 is considered a medium severity vulnerability that allows remote attackers to read arbitrary files.
How do I fix CVE-2012-4834?
To fix CVE-2012-4834, upgrade IBM WebSphere Portal to version 7.0.0.2 or 8.0.0.0 or later, applying the necessary fix packs.
What products are affected by CVE-2012-4834?
CVE-2012-4834 affects IBM WebSphere Portal versions 7.0.0.1, 7.0.0.2, and 8.0.0.0 before specific fix packs.
How can attackers exploit CVE-2012-4834?
Attackers can exploit CVE-2012-4834 by crafting a malicious URI that triggers the directory traversal vulnerability.
What types of files can be accessed due to CVE-2012-4834?
Due to CVE-2012-4834, attackers can potentially access any arbitrary file on the server that has been improperly secured.