CVE-2016-6517: Path Traversal
Published Jan 23, 2017
·Updated
Directory traversal vulnerability in Liferay 5.1.0 allows remote attackers to have unspecified impact via a %2E%2E (encoded dot dot) in the minifierBundleDir parameter to barebone.jsp.
Affected Software
1 affected component
Liferay Liferay=5.1.0
Event History
Jan 23, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-6517?
CVE-2016-6517 has been classified as a high severity vulnerability due to its potential to allow directory traversal attacks.
2
How do I fix CVE-2016-6517?
To fix CVE-2016-6517, update Liferay to a version that has addressed this vulnerability.
3
What impact does CVE-2016-6517 have on affected systems?
CVE-2016-6517 allows remote attackers to access unauthorized files or directories through the exploitation of directory traversal.
4
Which versions of Liferay are affected by CVE-2016-6517?
CVE-2016-6517 specifically affects Liferay version 5.1.0.
5
Can CVE-2016-6517 be exploited remotely?
Yes, CVE-2016-6517 can be exploited remotely by attackers using crafted parameters in requests.