CVE-2012-4834
Estado: ModificadaMedia (5)—
Directory traversal vulnerability in LayerLoader.jsp in the theme component in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF19 and 8.0 before CF03 allows remote attackers to read arbitrary files via a crafted URI.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
- Puntuación base: 5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 3.13%
- Percentil entre todas las CVEs puntuadas: 87
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-22
Referencias
- http://secunia.com/advisories/51281
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM76354
- http://www.ibm.com/connections/blogs/PSIRT/entry/security_vulnerability_in_theme_component_for_websphere_portal_versions_7_0_0_x_and_8_0_cve2012_48344
- http://www.ibm.com/support/docview.wss?uid=swg21617713
- http://www.ibm.com/support/docview.wss?uid=swg24033155
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78914
- http://secunia.com/advisories/51281
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM76354
- http://www.ibm.com/connections/blogs/PSIRT/entry/security_vulnerability_in_theme_component_for_websphere_portal_versions_7_0_0_x_and_8_0_cve2012_48344
- http://www.ibm.com/support/docview.wss?uid=swg21617713
- http://www.ibm.com/support/docview.wss?uid=swg24033155
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78914
JSON original (NVD)
Mostrar
{
"id": "CVE-2012-4834",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-11-30T19:55:01.143",
"references": [
{
"url": "http://secunia.com/advisories/51281",
"tags": [
"Third Party Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM76354",
"tags": [
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.ibm.com/connections/blogs/PSIRT/entry/security_vulnerability_in_theme_component_for_websphere_portal_versions_7_0_0_x_and_8_0_cve2012_48344",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg21617713",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg24033155",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78914",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://secunia.com/advisories/51281",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM76354",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ibm.com/connections/blogs/PSIRT/entry/security_vulnerability_in_theme_component_for_websphere_portal_versions_7_0_0_x_and_8_0_cve2012_48344",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg21617713",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg24033155",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78914",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Directory traversal vulnerability in LayerLoader.jsp in the theme component in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF19 and 8.0 before CF03 allows remote attackers to read arbitrary files via a crafted URI."
},
{
"lang": "es",
"value": "Una vulnerabilidad de salto de directorio en LayerLoader.jsp en el componente temático en IBM WebSphere Portal v7.0.0.1 y v7.0.0.2 antes de CF19 y v8.0 antes de CF03 permite a atacantes remotos leer archivos de su elección a través de un URI diseñada para tal fin.\r\n"
}
],
"lastModified": "2026-06-16T23:45:45.800",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6ECEE98-B276-4ED6-AA5A-109EA57E9925"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf002:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2991B76F-8E96-45A9-8B9D-942AF93755E4"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf003:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "041D220D-2088-4633-B1AA-8902AD1C6BD0"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf004:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "53B376AE-7AA9-4362-9CB2-17B3AB783FC0"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf005:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84D744C2-DA4B-4F04-894F-7820FDC49A04"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf006:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4713D128-6C5F-4362-A0E2-363F81D9BCA1"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf007:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67E76EE5-B618-49AA-A489-1BD7E45D391F"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf008:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC001899-F77A-4EED-BC6D-8400FF4354EE"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf009:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05426398-FE6A-4E4A-9C46-4675B5FAD915"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf010:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29E0A9B5-945C-4859-BE83-56B34544350B"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf011:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF8105DA-2519-428D-AB09-01EEF2FF6FDC"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf012:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2824CB0-BBC6-4AD5-993C-91E1CF293B3C"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf013:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56AF2117-2F73-4729-84DC-72B8B235C581"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf014:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "303EE4F0-9C7A-4B0B-8BBB-852C68A802E7"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf015:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4967BA17-DD56-42A7-812A-7B6EE74C6E03"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf016:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9DD708E8-67BE-48D7-AD76-FDA753426862"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf017:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC8DAFF7-9410-40E2-805A-580B82EA0667"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf018:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D06D62C6-13EF-42BA-BEBE-C3F9A42F5AA1"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E4FF84B-A17F-464B-A718-67C44D2C69BC"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf002:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E1F6463-557F-4582-95AD-93B2F1E12B62"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf003:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCBC4670-6513-4DE9-9187-5A8A5D088A67"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf004:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E92E848E-ECC3-46F9-9AB6-72260B791EFD"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf005:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EDF6E3B5-8707-4D70-AD03-8E35E8DC69A6"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf006:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7EB4341E-D73A-430F-A25E-879E01E08E6C"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf007:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B71DD10-7D04-4191-8453-6031134828B1"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf008:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C3CC8276-B821-49FD-A2D1-063982D263C6"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf009:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FBA7875F-F59E-4C42-9776-0F1DB713AAB2"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf010:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "335D6870-8F86-4218-B3DD-0A382FEF0DA6"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf011:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B469E735-0DCE-4616-B3FE-DED75FEAC642"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf012:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0ACFABA-E470-4043-B8E7-ACE2F9781D44"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf013:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D2FA62F-EEB7-4312-9359-FDA8E4743A81"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf014:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D8ABD15-49DE-4C4A-B9C0-5696BC1899C7"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf015:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2D98D3D-18DC-47CF-BED8-CD61A531D858"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf016:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9326CFC3-D9A7-43CE-8673-FD009F7A1F44"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf017:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B34D73EE-1E9D-4896-B2A2-D1463C13F399"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf018:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96B7FB90-D1F8-4D83-B954-A1990400BC27"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C90EF7A4-8181-42C3-BB95-395D0DD94C14"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf01:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A5566C6-E42F-4786-A8FC-59BE7EB47296"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf02:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31C0EC0E-0106-4333-8401-0F655C0F5850"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}