NuytsTech Security

CVE-2016-4314

by ·

Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the logFile parameter to downloadgz-ajaxprocessor.jsp.

Date published : 2017-02-16

http://www.securityfocus.com/bid/92473

http://www.securityfocus.com/archive/1/539200/100/0/threaded

Tags: