Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in idm/includes/helpServer.jsp in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to read arbitrary files in the filesystem of the IDM server via directory traversal sequences in the ext parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sun Java System Identity Manager 'helpServer.jsp'目录遍历漏洞
Vulnerability Description
Sun Java System Identity Manager是一个完整的端到端的保护敏感数据和管理标识配置文件与许可的解决方案。 Identity Manager的/idm/includes/helpServer.jsp服务器端脚本没有正确地验证ext参数,未经认证的远程攻击者可以通过向服务器提交恶意请求执行目录遍历攻击,检索文件系统上任意已知位置上的文件。
CVSS Information
N/A
Vulnerability Type
N/A