CVE-2012-4680

Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks a trailing \ (backslash) character…

published August 27, 2012

CVSS
—
EPSS
3%
Percentile
86.0
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks a trailing \ (backslash) character, allows remote attackers to read arbitrary files or list arbitrary directories via a .. (dot dot) in a URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02746 · 86.0th percentile
Published
2012-08-27T23:00Z
EPSS history
Timeline
  • 27 AUG 23:00Z
    Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks a trailing \ (backslash) character…
    cvelistv5