Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1 allows remote attackers to read arbitrary files via a crafted URL.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:43
Type | Values Removed | Values Added |
---|---|---|
References | () http://dev2dev.bea.com/pub/advisory/276 - Patch | |
References | () http://osvdb.org/41881 - | |
References | () http://secunia.com/advisories/28991 - | |
References | () http://www.securitytracker.com/id?1019437 - | |
References | () http://www.vupen.com/english/advisories/2008/0607/references - |
Information
Published : 2008-02-22 21:44
Updated : 2024-11-21 00:43
NVD link : CVE-2008-0904
Mitre link : CVE-2008-0904
CVE.ORG link : CVE-2008-0904
JSON object : View
Products Affected
bea_systems
- aqualogic_interaction
- plumtree_collaboration
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor