Axway File Transfer Direct Path Traversal Vulnerability

Axway File Transfer Direct is a temporary file exchange solution from Axway France. A directory traversal vulnerability exists in Axway File Transfer Direct version 2.7.1. No details of the vulnerability are available at this time...

Directory traversal

In Axway File Transfer Direct 2.7.1, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request with %2e instead of '.' characters, as demonstrated by an initial /h2hdocumentation//%2e%2e/ substring...

PT-2019-18122

Name of the Vulnerable Software and Affected Versions Axway File Transfer Direct version 2.7.1 Description The issue allows for an unauthenticated Directory Traversal by issuing a specially crafted HTTP GET request. This can be achieved by using %2e instead of '.' characters in the request, as...

CVE-2019-6500: Improper Limitation of a Pathname to a Restricted Directory

In Axway File Transfer Direct 2.7.1, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request with %2e instead of '.' characters, as demonstrated by an initial /h2hdocumentation//%2e%2e/ substring...