CVE-2012-2202

Directory traversal vulnerability in javatester_init.php in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the template parameter.

🔗 References (8)

• psirt@ushttp://secunia.com/advisories/49897
• psirt@ushttp://www-01.ibm.com/support/docview.wss?uid=swg21605630
• psirt@ushttp://www.kb.cert.org/vuls/id/659791
• psirt@ushttps://exchange.xforce.ibmcloud.com/vulnerabilities/76801
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/49897
• af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21605630
• af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/659791
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/76801