NetSight
IP …
low3.7

CVE-2016-1183

NTT Data TERASOLUNA Server Framework for Java(WEB) 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allow…

Impact

NTT Data TERASOLUNA Server Framework for Java(WEB) 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allows remote attackers to bypass a file-extension protection mechanism, and consequently read arbitrary files, via a crafted pathname.

Affected products

VendorProductAffected versions
NttdataTerasoluna Server Framework For Java Web
Versions 2.0.0.1, 2.0.0.2, 2.0.1.0, 2.0.2.0, 2.0.5.1, 2.0.5.2

Weakness classification

CWE-264

References