Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7709
HistoryNov 09, 2018 - 1:47 a.m.

Directory Traversal

2018-11-0901:47:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

Apache Tomcat Catalina is vulnerable to directory traversal. Lack of validation of WAR file name allows the attacker to delete the work-directory files using a WAR filename (...war).

References

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N