Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7500
HistorySep 19, 2018 - 1:52 a.m.

Arbitrary File Read And Write

2018-09-1901:52:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

EPSS

0.002

Percentile

55.0%

org.apache.karaf.shell.core is vulnerable to arbitrary file read and write. A user with rights to the Karaf console is able to read or write any file on the file system, which would allow an attacker with access to the sshd service to abuse the vulnerability to read or write arbitrary files on the file system to which the Karaf process user has access.

EPSS

0.002

Percentile

55.0%