CVE-2018-16171: Path Traversal
Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 allows remote attackers to execute Java code file on the server via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-16171?
CVE-2018-16171 is a directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8, which allows remote attackers to execute Java code files on the server.
How does the directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 occur?
The directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 occurs due to insufficient input validation, allowing remote attackers to manipulate file paths and access files outside the intended directory.
What is the severity of CVE-2018-16171?
CVE-2018-16171 has a severity rating of 8.8 (high).
How can I fix the directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8?
To fix the vulnerability, update Cybozu Remote Service to version 3.2.0 or later, which contains the necessary fixes and patches to address the directory traversal vulnerability.
Where can I find more information about CVE-2018-16171?
You can find more information about CVE-2018-16171 on the JVN website (https://jvn.jp/en/jp/JVN23161885/index.html) and the Cybozu Support Knowledge Base (https://kb.cybozu.support/article/35259/).