cbcvebase.
CVE-2017-1577
published 2017-09-28

CVE-2017-1577: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL…

PriorityP346high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
EPSS
2.90%
85.3th percentile
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 132117.

Affected

11 ranges
VendorProductVersion rangeFixed in
ibmwebsphere_portal——
ibmwebsphere_portal——
ibmwebsphere_portal——
ibmwebsphere_portal——
ibmwebsphere_portal——
ibmwebsphere_portal——
ibmwebsphere_portal——
ibmwebsphere_portal——
ibmwebsphere_portal——
ibmwebsphere_portal——
ibmwebsphere_portal——

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.