Description
It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
[UNKNOWN] wildfly
n/aaffected
References
- https://access.redhat.com/errata/RHSA-2017:1411 ↗
- http://rhn.redhat.com/errata/RHSA-2017-1409.html ↗
- https://access.redhat.com/errata/RHSA-2017:1548 ↗
- https://access.redhat.com/errata/RHSA-2017:1549 ↗
- https://access.redhat.com/errata/RHSA-2017:3458 ↗
- https://access.redhat.com/errata/RHSA-2017:1552 ↗
- http://www.securitytracker.com/id/1038757 ↗
- https://access.redhat.com/errata/RHSA-2017:1410 ↗
- https://access.redhat.com/errata/RHSA-2017:1412 ↗
- http://rhn.redhat.com/errata/RHSA-2017-1551.html ↗
- https://access.redhat.com/errata/RHSA-2017:3455 ↗
- https://access.redhat.com/errata/RHSA-2017:3456 ↗
- http://www.securityfocus.com/bid/98967 ↗
- https://access.redhat.com/errata/RHSA-2017:3454 ↗
- https://access.redhat.com/errata/RHSA-2017:1550 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2595 ↗