← Back

CVE-2004-2478

nvd nist
Published: Dec 31, 2004Modified: Apr 16, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.

Affected (21)

Ca
1 product
Unicenter Web Services Distributed Management
Ibm
1 product
Trading Partner Interchange
Jetty
1 product
Jetty Http Server
Configuration A
21 vulnerable
Vulnerable SoftwareAffected Versions
Unicenter Web Services Distributed Management
Up to 3.1
Ibm
Trading Partner Interchange
Up to 4.2.2
Trading Partner Interchange
Version 4.2.1
Jetty
Jetty Http Server
Version 3.1.6
Jetty Http Server
Version 3.1.7
Jetty Http Server
Version 4.1.0
Jetty Http Server
Version 4.1.0_rc4
Jetty Http Server
Version 4.1.1
Jetty Http Server
Version 4.2.11
Jetty Http Server
Version 4.2.12
Jetty Http Server
Version 4.2.14
Jetty Http Server
Version 4.2.15
Jetty Http Server
Version 4.2.16
Jetty Http Server
Version 4.2.17
Jetty Http Server
Version 4.2.18
Jetty Http Server
Version 4.2.19
Jetty Http Server
Version 4.2.4
Jetty Http Server
Version 4.2.5
Jetty Http Server
Version 4.2.6
Jetty Http Server
Version 4.2.7
Jetty Http Server
Version 4.2.9

References (22)

Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.