IBM WebSphere Portal Theme Component Unspecified Security Vulnerability

Bugtraq ID:	56593
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Nov 19 2012 12:00AM
Updated:	Nov 19 2012 12:00AM
Credit:	IBM
Vulnerable:	IBM Websphere Portal 7.0.0.1
Not Vulnerable:

IBM WebSphere Portal Theme Component 'LayerLoader.jsp' Directory Traversal Vulnerability

IBM WebSphere Portal is prone to a directory-traversal vulnerability.

Remote attackers can use specially crafted requests with directory-traversal sequences ('../') to retrieve arbitrary files inthe context of the application.

Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks.

Versions prior to WebSphere 8.0 CF3 is vulnerable.

IBM WebSphere Portal Theme Component Unspecified Security Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM WebSphere Portal Theme Component 'LayerLoader.jsp' Directory Traversal Vulnerability

Solution:
The vendor has released fixes. Please see the references for details.

IBM WebSphere Portal Theme Component 'LayerLoader.jsp' Directory Traversal Vulnerability

References:

• IBM Websphere Homepage (IBM)