CVE-2015-2856

Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attackers to read arbitrary files via a .. (dot dot) in the statecode cookie.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*

Information

Published : 2017-10-10 06:29

Updated : 2017-10-23 15:02


NVD link : CVE-2015-2856

Mitre link : CVE-2015-2856


JSON object : View

CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Advertisement

dedicated server usa

Products Affected

accellion

  • file_transfer_appliance