1. Home
  2. CVE Database
  3. CVE-2012-4991
HIGH · 8.5

CVE-2012-4991

Multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier allow remote authenticated users to (1) read, (2) delete, or (3) create files, or (4) list directories, via a ...

Vulnerability Description

Multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier allow remote authenticated users to (1) read, (2) delete, or (3) create files, or (4) list directories, via a ..%5C (encoded dot dot backslash) in a URI.

CVSS Score

8.5

HIGH

AV:N/AC:L/Au:S/C:C/I:C/A:N
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
NONE

Affected Products

VendorProductVersions
AxwaySecuretransport<= 5.1

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2012-4991?

CVE-2012-4991 is a vulnerability with a CVSS score of 8.5 (HIGH). Multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier allow remote authenticated users to (1) read, (2) delete, or (3) create files, or (4) list directories, via a ...

How severe is CVE-2012-4991?

CVE-2012-4991 has been rated HIGH with a CVSS base score of 8.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-4991?

Check the references section above for vendor advisories and patch information. Affected products include: Axway Securetransport.