CVE-2017-2595: Path Traversal
A vulnerability in log file viewer of Wildfly server 10.x.x allowing arbitrary file read to authenticated attacker via path traversal was found.
Other sources
It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2595?
CVE-2017-2595 is classified as a medium severity vulnerability due to its ability to allow arbitrary file read by authenticated users.
Which software versions are affected by CVE-2017-2595?
CVE-2017-2595 affects Red Hat JBoss Enterprise Application Platform versions 6.0.0, 6.4.0, 7.0.0, and 7.1.0.
How do I mitigate CVE-2017-2595?
To mitigate CVE-2017-2595, it is recommended to upgrade to the latest patched versions of Red Hat JBoss Enterprise Application Platform.
What kind of attack does CVE-2017-2595 enable?
CVE-2017-2595 enables an authenticated attacker to perform path traversal attacks, potentially allowing access to sensitive files.
Is CVE-2017-2595 present in Red Hat Enterprise Linux?
CVE-2017-2595 does not apply to Red Hat Enterprise Linux versions 6.0 and 7.0, as those are not vulnerable.