Vulnerability in Hp Web_jetadmin

CVE-2004-1857

Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files via a .. (dot dot) in the setinclude parameter.

EPSS: 0.868 (99.7th percentile) — read the EPSS interpretation.

Affected products

Hp Web_jetadmin — versions 7.5.2546
N/a — versions n/a

References

cve@mitre.org (Vendor Advisory, x_refsource_HP, vendor-advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)