CVE-2015-2856
Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attackers to read arbitrary files via a .. (dot dot) in the statecode cookie.
- Score
- CVSS 3.0 7.5 High
- Status
- Modified - cret@cert.org
- Published
- 2017-10-10
- Last modified
- 2024-08-06
- Weaknesses
- CWE-22
Affected products
References
- https://www.rapid7.com/db/modules/auxiliary/scanner/http/accellion_fta_statecode_file_read
