CVE-2015-2856: Path Traversal
Published Oct 10, 2017
·Updated
Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA911210 allows remote attackers to read arbitrary files via a .. (dot dot) in the statecode cookie.
Affected Software
1 affected component
Accellion File Transfer Appliance<=fta_9_11_200
Event History
Oct 10, 2017
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-2856?
CVE-2015-2856 is classified as a medium severity vulnerability.
2
What devices are affected by CVE-2015-2856?
CVE-2015-2856 affects Accellion File Transfer Appliance devices with versions prior to FTA_9_11_210.
3
How do I fix CVE-2015-2856?
To fix CVE-2015-2856, upgrade the Accellion File Transfer Appliance to version FTA_9_11_210 or later.
4
What type of vulnerability is CVE-2015-2856?
CVE-2015-2856 is a directory traversal vulnerability that allows attackers to read arbitrary files.
5
What can attackers do with CVE-2015-2856?
Attackers exploiting CVE-2015-2856 can access sensitive files on an affected Accellion File Transfer Appliance.