CVE-2004-2478

published 2004-12-31

CVE-2004-2478: Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed…

Priority P3 34 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.

Affected

21 ranges

Vendor	Product	Version range	Fixed in
ca	unicenter_web_services_distributed_management	<= 3.1	—
ibm	trading_partner_interchange	<= 4.2.2	—
ibm	trading_partner_interchange	—	—
jetty	jetty_http_server	—	—
jetty	jetty_http_server	—	—
jetty	jetty_http_server	—	—
jetty	jetty_http_server	—	—
jetty	jetty_http_server	—	—
jetty	jetty_http_server	—	—
jetty	jetty_http_server	—	—
jetty	jetty_http_server	—	—
jetty	jetty_http_server	—	—
jetty	jetty_http_server	—	—
jetty	jetty_http_server	—	—
jetty	jetty_http_server	—	—
jetty	jetty_http_server	—	—
jetty	jetty_http_server	—	—
jetty	jetty_http_server	—	—
jetty	jetty_http_server	—	—
jetty	jetty_http_server	—	—
jetty	jetty_http_server	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.