Arbitrary File Read Vulnerability in IBM WebSphere Portal

Arbitrary File Read Vulnerability in IBM WebSphere Portal

CVE-2012-4834 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

Directory traversal vulnerability in LayerLoader.jsp in the theme component in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF19 and 8.0 before CF03 allows remote attackers to read arbitrary files via a crafted URI.

Learn more about our Cis Benchmark Audit For Ibm I.