Path Traversal

🗓️ 12 Nov 2018 08:02:36Reported by Veracode Vulnerability DatabaseType

Apache Tomcat servlets-webdav path traversal vulnerability allows remote authenticated user to read arbitrary files via WebDAV write request

Reporter	Title	Published	Views	Family All 128
IBM Security Bulletins	Security Bulletin: TADDM affected by multiple vulnerabilities due to Apache Tomcat libraries	26 Mar 202503:33	–	ibm
Tenable Nessus	Apache Tomcat < 6.0.15 WEBDAV Lock Request Information Disclosure (deprecated)	15 Oct 200700:00	–	nessus
Tenable Nessus	Mac OS X < 10.5.4 Multiple Vulnerabilities	18 Aug 200400:00	–	nessus
Tenable Nessus	CentOS 5 : tomcat (CESA-2008:0042)	6 Jan 201000:00	–	nessus
Tenable Nessus	Debian DSA-1447-1 : tomcat5.5 - several vulnerabilities	7 Jan 200800:00	–	nessus
Tenable Nessus	Debian DSA-1453-1 : tomcat5 - several vulnerabilities	8 Jan 200800:00	–	nessus
Tenable Nessus	Fedora 7 : tomcat5-5.5.25-1jpp.1.fc7 (2007-3456)	20 Nov 200700:00	–	nessus
Tenable Nessus	Fedora 8 : tomcat5-5.5.25-1jpp.1.fc8 (2007-3474)	20 Nov 200700:00	–	nessus
Tenable Nessus	Fedora 7 : tomcat5-5.5.26-1jpp.2.fc7 (2008-1467)	14 Feb 200800:00	–	nessus
Tenable Nessus	Fedora 8 : tomcat5-5.5.26-1jpp.2.fc8 (2008-1603)	14 Feb 200800:00	–	nessus

Vulners

Node

apache catalinaRange6.0.13–6.0.14java

jcommon jcommonMatch0.9.7_1jpp.el4ep1.1

jcommon jcommonMatch0.9.7_1jpp.ep1.1.el5

jbossas jbossasMatch4.0.5_2.cp04.el4s1.2

jbossas jbossasMatch4.0.4_1.el4s1.25

jbossas jbossasMatch4.0.4_1.el4s1.20

jbossas jbossasMatch4.0.5_1.el4s1.5

jbossas jbossasMatch4.2.0_1.ep1.9.el5

jbossas jbossasMatch4.2.0_2.cp01.ep1.3.el5

jfree jfreechartMatch0.9.21_2jpp.el4ep1.1

jfree jfreechartMatch0.9.21_2jpp.ep1.1.el5.2

jboss-aop jboss-aopMatch1.5.5_0jpp.ep1.2.el5.1

concurrent concurrentMatch1.3.4_6jpp.ep1.2.el5.1

redhat jbosswebMatch2.0.0_2.cp01.0jpp.ep1.4.el5

jboss-cache jboss-cacheMatch1.4.1_1.sp3.1jpp.ep1.1.el5

rh-eap-docs rh-eap-docsMatch4.2.0_1.ep1.22.el5

rh-eap-docs rh-eap-docsMatch4.2.0_2.cp01.ep1.2.el5

jbossxb jbossxbMatch1.0.0_0jpp.ep1.1.el5.1

jbossxb jbossxbMatch1.0.0_1.cp01.0jpp.ep1.2.el5

jboss-seam jboss-seamMatch1.2.0_1.ap.ep1.19.el5

jboss-seam jboss-seamMatch1.2.1_1.ep1.2.el5

jboss jboss-remotingMatch2.2.2_1jpp.ep1.5.el5

jacorb jacorbMatch2.3.0_1jpp.ep1.1.el5.2

jboss-common jboss-commonMatch1.2.0_0jpp.ep1.2.el5.2

hibernate3 hibernate3Match3.2.4_1.sp1_cp01.0jpp.ep1.1.el5.1

tomcat5 tomcat5Match5.5.23_0jpp.3.0.2.el5

tomcat5 tomcat5Match5.5.23_0jpp.1.0.3.el5

tomcat5 tomcat5Match5.5.23_0jpp.1.0.4.el5

mod_perl mod_perlMatch2.0.2_4.el4s1.2

Source	Link
mail-archives	www.mail-archives.apache.org/mod_mbox/tomcat-users/200710.mbox/%[email protected]%3E
github	www.github.com/apache/tomcat/commit/901292cf9d7d8225f8a3b96c7583e2bd8b41772d
securitytracker	www.securitytracker.com/id
marc	www.marc.info/
securityfocus	www.securityfocus.com/archive/1/507985/100/0/threaded
sunsolve	www.sunsolve.sun.com/search/document.do
securityfocus	www.securityfocus.com/bid/26070
secunia	www.secunia.com/advisories/27398
secunia	www.secunia.com/advisories/27446
secunia	www.secunia.com/advisories/27481

08 Nov 2023 02:00Current

4.8Medium risk

Vulners AI Score4.8

CVSS 23.5

EPSS0.39681