Axway File Transfer Direct Path Traversal Vulnerability

Axway File Transfer Direct is a temporary file exchange solution from Axway France. A directory traversal vulnerability exists in Axway File Transfer Direct version 2.7.1. No details of the vulnerability are available at this time...

Directory traversal

In Axway File Transfer Direct 2.7.1, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request with %2e instead of '.' characters, as demonstrated by an initial /h2hdocumentation//%2e%2e/ substring...