{ "schema_version": "1.4.0", "id": "GHSA-h494-2jr7-jcfj", "modified": "2022-05-17T05:17:48Z", "published": "2022-05-17T05:17:48Z", "aliases": [ "CVE-2012-5969" ], "details": "Multiple directory traversal vulnerabilities on the Huawei E585 device allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the PATH_INFO of an sdcard/ request or (2) modify arbitrary files via a .. (dot dot) in the req_page parameter to en/sms.cgi.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5969" }, { "type": "WEB", "url": "http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-198239.htm" }, { "type": "WEB", "url": "http://www.kb.cert.org/vuls/id/871148" } ], "database_specific": { "cwe_ids": [ "CWE-22" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2012-12-19T11:55:00Z" } }