Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2016-1183 Details

Description

NTT Data TERASOLUNA Server Framework for Java(WEB) 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allows remote attackers to bypass a file-extension protection mechanism, and consequently read arbitrary files, via a crafted pathname.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:3.7 LOWVector:CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000098 CVEVendor Advisory
http://jvn.jp/en/jp/JVN74659077/index.html CVEVendor Advisory
http://www.fujitsu.com/jp/products/software/resources/condition/security/vulnerabilities/2016/index.html#CVE-2016-1183 CVEVendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000098 [email protected]Vendor Advisory
http://jvn.jp/en/jp/JVN74659077/index.html [email protected]Vendor Advisory

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-264Permissions, Privileges, and Access Controls[email protected]

Affected Products

ProductVersions
nttdata terasoluna server framework for java web
2.0.0.1
2.0.0.2
2.0.1.0
2.0.2.0
2.0.5.1

CPE

  • cpe:2.3:a:nttdata:terasoluna_server_framework_for_java_web:2.0.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:nttdata:terasoluna_server_framework_for_java_web:2.0.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:nttdata:terasoluna_server_framework_for_java_web:2.0.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:nttdata:terasoluna_server_framework_for_java_web:2.0.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:nttdata:terasoluna_server_framework_for_java_web:2.0.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:nttdata:terasoluna_server_framework_for_java_web:2.0.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:nttdata:terasoluna_server_framework_for_java_web:2.0.5.3:*:*:*:*:*:*:*
  • cpe:2.3:a:nttdata:terasoluna_server_framework_for_java_web:2.0.6.1:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2016-1183
NVD Published Date:
Jun 19, 2016
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2016-1183 Details - Not Deferred