Lucene search

CVE-2022-31159

🗓️ 15 Jul 2022 18:09:15Reported by GoogleType

osv🔗 osv.dev👁 15 Views

The AWS SDK for Java v1 prior to 1.12.261 allows partial-path traversal in `downloadDirectory` method, permitting unauthorized retrieval of directories outside intended destination

Reporter	Title	Published	Views	Family All 25
Cvelist	CVE-2022-31159 Partial Path Traversal in com.amazonaws:aws-java-sdk-s3	15 Jul 202217:45	–	cvelist
CVE	CVE-2022-31159	15 Jul 202218:15	–	cve
CVE	CVE-2022-31171	21 Jul 202204:15	–	cve
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator vulnerable to directory traversal due to AWS SDK for Java (CVE-2022-31159)	9 Feb 202319:33	–	ibm
IBM Security Bulletins	Security Bulletin: AWS SDK for Java as used by IBM QRadar SIEM is vulnerable to path traversal (CVE-2022-31159)	21 Aug 202319:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by an AWS SDK vulnerability (CVE-2022-31159)	19 May 202321:18	–	ibm
IBM Security Bulletins	Security Bulletin: There is a security vulnerability in AWS SDK for Java used by Maximo Asset Management (CVE-2022-31159)	19 Jun 202318:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in AWS SDK for Java	30 Nov 202210:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect server is vulnerable to a file system access attack due to AWS SDK for Java (CVE-2022-31159)	20 Jun 202316:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in AWS SDK for Java affects IBM Process Mining . CVE-2022-31159	1 Feb 202321:58	–	ibm

Source	Link
github	www.github.com/aws/aws-sdk-java/security/advisories/GHSA-c28r-hw5m-5gv3

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Jul 2022 18:15Current

9.3High risk

Vulners AI Score9.3

CVSS37.9

EPSS0.001