Directory Traversal

2019-05-0705:34:22

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

37.3%

JSON

Apache Karaf is vulnerable to directory traversal. The vulnerability exists as it does not prevent the use of relative path in the installation of the config service or MBean, allowing an attacker to overwrite existing files.

CPENameOperatorVersion
apache karaf :: configadmin :: corele4.0.10
apache karaf :: configadmin :: corele4.1.7
apache karaf :: configadmin :: corele4.2.4
apache karaf :: configadmin :: corele4.1.0

Name	Operator	Version
apache karaf :: configadmin :: core	le	4.0.10
apache karaf :: configadmin :: core	le	4.1.7
apache karaf :: configadmin :: core	le	4.2.4
apache karaf :: configadmin :: core	le	4.1.0