« Volver al listado

CVE-2012-2202

Estado: ModificadaBaja (3.5)—

Directory traversal vulnerability in javatester_init.php in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the template parameter.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

IBM — Lotus Protector FOR Mail SecurityIBM — Proventia Network Mail Security System Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-2202",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-07-27T10:27:49.043",
  "references": [
    {
      "url": "http://secunia.com/advisories/49897",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21605630",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/659791",
      "tags": [
        "US Government Resource"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/76801",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://secunia.com/advisories/49897",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21605630",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/659791",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/76801",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in javatester_init.php in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the template parameter."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de salto de directorio en javatester_init.php en IBM Lotus Protector para Mail Security v2.1, v2.5, v2.5.1, y v2.8 e IBM ISS Proventia Network Mail Security System, permite a administradores autenticados remotamente leer archivos de su elección a través .. (punto punto) en el parámetro template."
    }
  ],
  "lastModified": "2026-06-16T23:41:10.460",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "31F356BD-5E3C-4426-B315-86F681E2F6A8"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "068537DC-785E-45E2-9B04-245621B48BB4"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0FCE408A-BD6C-4D2C-8F37-132394729729"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F9277E17-F3EC-4E8B-B4E0-629966D7EB89"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:proventia_network_mail_security_system_firmware:2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "37B13DDF-DCD6-4C10-B533-0C25FE966007"
            },
            {
              "criteria": "cpe:2.3:o:ibm:proventia_network_mail_security_system_firmware:2.5.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D99B0275-98EE-48EA-B454-E13EC6521F32"
            },
            {
              "criteria": "cpe:2.3:o:ibm:proventia_network_mail_security_system_firmware:2.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BBC5F27-E6F2-4B18-AEC5-3032207FAD25"
            },
            {
              "criteria": "cpe:2.3:o:ibm:proventia_network_mail_security_system_firmware:2.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0D45AC4-6028-44DB-BFC6-24D105FBB2C2"
            },
            {
              "criteria": "cpe:2.3:o:ibm:proventia_network_mail_security_system_firmware:2.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B1090D84-2202-47C5-97F5-781543BB74BC"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:proventia_network_mail_security_system:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8FE2B207-9C49-4107-9109-A6E9D1D610C6"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}