Path Traversal in Specview

CVE-2012-5972

Directory traversal vulnerability in the web server in SpecView 2.5 build 853 and earlier allows remote attackers to read arbitrary files via a ... (dot dot dot) in a URI.

EPSS: 0.048 (91.0th percentile) — read the EPSS interpretation.

Affected products

Specview — versions 0

Weakness classification (CWE)

References

ics-cert@hq.dhs.gov (Exploit, x_refsource_MISC)
ics-cert@hq.dhs.gov
af854a3a-2127-422b-91ae-364da2661108 (US Government Resource)