CVE-2018-1048: Path Traversal
It was found that the AJP connector in undertow does not use the ALLOWENCODEDSLASH option and thus allow the the slash / anti-slash characters encoded in the url which may lead to path traversal and result in the information disclosure of arbitrary local files.
Other sources
It was found that the AJP connector in undertow, as shipped in Jboss EAP 7.1.0.GA, does not use the ALLOWENCODEDSLASH option and thus allow the the slash / anti-slash characters encoded in the url which may lead to path traversal and result in the information disclosure of arbitrary local files.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1048?
CVE-2018-1048 has been rated as a medium severity vulnerability due to its potential for path traversal and information disclosure.
How do I fix CVE-2018-1048?
To fix CVE-2018-1048, you should upgrade JBoss EAP to version 7.1.1 or later, which includes mitigations for this vulnerability.
What systems are affected by CVE-2018-1048?
CVE-2018-1048 specifically affects Red Hat JBoss Enterprise Application Platform version 7.1.0.
What is the impact of CVE-2018-1048?
The impact of CVE-2018-1048 is that it allows attackers to exploit the vulnerability to disclose arbitrary local files through path traversal.
Is there a workaround for CVE-2018-1048?
There are no official workarounds for CVE-2018-1048, so upgrading to an unaffected version is recommended.