CVE-2016-8752: Path Traversal
Published Aug 29, 2017
·Updated
Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img.
Affected Software
11 affected componentsFixes available
Apache Atlas=0.6.0
Apache Atlas=0.6.0-rc1
Apache Atlas=0.6.0-rc2
Apache Atlas=0.7.0
Apache Atlas=0.7.0-rc1
Apache Atlas=0.7.0-rc2
Apache Atlas=0.7.1
Apache Atlas=0.7.1-rc1
Apache Atlas=0.7.1-rc2
Apache Atlas=0.7.1-rc3
maven/org.apache.atlas:atlas-common>=0.6.0-incubating<0.8-incubating
0.8-incubating
Event History
Aug 29, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
May 17, 2022
Advisory Published
01:18 AM
Frequently Asked Questions
1
What is the severity of CVE-2016-8752?
CVE-2016-8752 has a medium severity rating due to unauthorized access to web application directory contents.
2
How do I fix CVE-2016-8752?
To fix CVE-2016-8752, upgrade to Apache Atlas version 0.8-incubating or later.
3
Which Apache Atlas versions are affected by CVE-2016-8752?
CVE-2016-8752 affects Apache Atlas versions 0.6.0, 0.7.0, and 0.7.1, including their release candidates.
4
What are the implications of CVE-2016-8752?
The implications of CVE-2016-8752 include potential exposure of sensitive files in the webapp directory.
5
Is a patch available for CVE-2016-8752?
Yes, a patch is available in Apache Atlas version 0.8-incubating.