CVE-2016-1183 | BDVDB-2026-76558 Detail

Description#

NTT Data TERASOLUNA Server Framework for Java(WEB) 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allows remote attackers to bypass a file-extension protection mechanism, and consequently read arbitrary files, via a crafted pathname.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.fujitsu.com/jp/products/software/resources/condition/security/vulnerabilities/2016/index.html#CVE-2016-1183
http://jvn.jp/en/jp/JVN74659077/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000098

Exploit#

No public exploit known

History#

Version 12016-06-19Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.