Published: 01/12/2014 Updated: 04/03/2015

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 542

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Directory traversal vulnerability in JBoss Undertow 1.0.x prior to 1.0.17, 1.1.x prior to 1.1.0.CR5, and 1.2.x prior to 1.2.0.Beta3, when running on Windows, allows remote malicious users to read arbitrary files via a .. (dot dot) in a resource URI.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat undertow

It was discovered that Undertow is vulnerable to a directory traversal flaw A remote attacker could use this flaw to read arbitrary files that are accessible to the user running the Java process ...

Apache ActiveMQ versions 5111 and 5132 suffer from command execution and directory traversal vulnerabilities ...

CWE-22 http://seclists.org/oss-sec/2014/q4/830 https://issues.jboss.org/browse/WFLY-4020 https://issues.jboss.org/browse/UNDERTOW-338 https://bugzilla.redhat.com/show_bug.cgi?id=1157478 http://www.securityfocus.com/bid/71328 https://nvd.nist.gov https://packetstormsecurity.com/files/139999/Apache-ActiveMQ-5.11.1-5.13.2-Directory-Traversal-Command-Execution.html https://access.redhat.com/security/cve/cve-2014-7816

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-7816

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect