Path Traversal

2019-05-0206:12:04

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

59.7%

JSON

Red Hat JBoss Enterprise Application is vulnerable to path traversal attacks. The attacks are possible because the application fails to sufficiently sanitize user-supplied input. Remote attackers may use a specially crafted request with directory-traversal sequences to read arbitrary files.

CPENameOperatorVersion
eap7-jbossws-spieq3.1.0__2.Final_redhat_1.1.ep7.el7
eap7-jbossws-spieq3.1.2__1.Final_redhat_1.1.ep7.el7
eap7-jbossws-spieq3.1.4__2.Final_redhat_1.1.ep7.el6
eap7-jbossws-spieq3.1.4__2.Final_redhat_1.1.ep7.el7
eap7-jbossws-spieq3.1.0__2.Final_redhat_1.1.ep7.el6
eap7-jbossws-spieq3.1.2__1.Final_redhat_1.1.ep7.el6
eap7-jboss-el-api_3.0_speceq1.0.8__1.Final_redhat_1.1.ep7.el7
eap7-jboss-el-api_3.0_speceq1.0.6__1.Final_redhat_1.1.ep7.el7
eap7-jboss-el-api_3.0_speceq1.0.6__1.Final_redhat_1.1.ep7.el6
eap7-jboss-el-api_3.0_speceq1.0.8__1.Final_redhat_1.1.ep7.el6

Name	Operator	Version
eap7-jbossws-spi	eq	3.1.0__2.Final_redhat_1.1.ep7.el7
eap7-jbossws-spi	eq	3.1.2__1.Final_redhat_1.1.ep7.el7
eap7-jbossws-spi	eq	3.1.4__2.Final_redhat_1.1.ep7.el6
eap7-jbossws-spi	eq	3.1.4__2.Final_redhat_1.1.ep7.el7
eap7-jbossws-spi	eq	3.1.0__2.Final_redhat_1.1.ep7.el6
eap7-jbossws-spi	eq	3.1.2__1.Final_redhat_1.1.ep7.el6
eap7-jboss-el-api_3.0_spec	eq	1.0.8__1.Final_redhat_1.1.ep7.el7
eap7-jboss-el-api_3.0_spec	eq	1.0.6__1.Final_redhat_1.1.ep7.el7
eap7-jboss-el-api_3.0_spec	eq	1.0.6__1.Final_redhat_1.1.ep7.el6
eap7-jboss-el-api_3.0_spec	eq	1.0.8__1.Final_redhat_1.1.ep7.el6