CVE-2016-4314

Published: 2017-02-17T02:59Z

Last Modified: 2024-11-21T02:51Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the logFile parameter to downloadgz-ajaxprocessor.jsp. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt