CVE-2016-1183

Name of the Vulnerable Software and Affected Versions NTT Data TERASOLUNA Server Framework for Java(WEB) versions 2.0.0.1 through 2.0.6.1

Description The issue allows remote attackers to bypass a file-extension protection mechanism, which can lead to the reading of arbitrary files via a crafted pathname.

Recommendations For versions 2.0.0.1 through 2.0.6.1, update to a version that includes a fix for this issue to prevent remote attackers from bypassing the file-extension protection mechanism.