Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-4244

Codehaus-plexus: directory traversal

Description

A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat RHINT Camel-K-1.10.1

Default version status: unaffected

Red Hat RHPAM 7.13.1 async

Default version status: unaffected

Red Hat A-MQ Clients 2

Default version status: unaffected

Red Hat Red Hat A-MQ Online

Default version status: affected

Red Hat Red Hat build of Apache Camel for Spring Boot

Default version status: affected

Red Hat Red Hat build of Quarkus

Default version status: affected

Red Hat Red Hat Data Grid 8

Default version status: affected

Red Hat Red Hat Decision Manager 7

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: unaffected

Red Hat Red Hat Integration Camel Quarkus

Default version status: affected

Red Hat Red Hat Integration Change Data Capture

Default version status: affected

Red Hat Red Hat Integration Service Registry

Default version status: affected

Red Hat Red Hat JBoss A-MQ 7

Default version status: unaffected

Red Hat Red Hat JBoss Data Grid 7

Default version status: unknown

Red Hat Red Hat JBoss Enterprise Application Platform 6

Default version status: unknown

Red Hat Red Hat JBoss Enterprise Application Platform 7

Default version status: affected

Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack

Default version status: affected

Red Hat Red Hat JBoss Fuse 6

Default version status: unknown

Red Hat Red Hat JBoss Fuse 7

Default version status: affected

Red Hat Red Hat JBoss Fuse Service Works 6

Default version status: unknown

Red Hat Red Hat JBoss Web Server 3

Default version status: unknown

Red Hat Red Hat JBoss Web Server 5

Default version status: unaffected

Red Hat Red Hat OpenShift Application Runtimes

Default version status: unaffected

Red Hat Red Hat Process Automation 7

Default version status: unknown

Red Hat Red Hat Single Sign-On 7

Default version status: unaffected

Red Hat Red Hat Software Collections

Default version status: affected

Red Hat Red Hat Software Collections

Default version status: unaffected

Red Hat Red Hat Software Collections

Default version status: unaffected

Red Hat Red Hat Software Collections

Default version status: affected

Red Hat Red Hat Software Collections

Default version status: affected

Red Hat Red Hat Software Collections

Default version status: unaffected

Red Hat Red Hat Software Collections

Default version status: affected

Red Hat Red Hat Software Collections

Default version status: unaffected

Red Hat Red Hat Software Collections

Default version status: affected

Red Hat Red Hat Software Collections

Default version status: affected

Red Hat Red Hat Software Collections

Default version status: affected

Red Hat Red Hat Software Collections

Default version status: unaffected

Red Hat Red Hat support for Spring Boot

Default version status: affected

References