CVE-2018-7467: Path Traversal
Published Feb 27, 2018
·Updated
AxxonSoft Axxon Next has Directory Traversal via an initial /css//..%2f substring in a URI.
Affected Software
1 affected component
AxxonSoft Next
Event History
Feb 27, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-7467?
CVE-2018-7467 is classified as a medium severity vulnerability.
2
How does CVE-2018-7467 exploit the AxxonSoft Axxon Next software?
CVE-2018-7467 exploits a directory traversal vulnerability through the manipulation of URI with an initial /css//..%2f substring.
3
What versions of AxxonSoft Axxon Next are affected by CVE-2018-7467?
CVE-2018-7467 affects all versions of AxxonSoft Axxon Next prior to any vendor patch that addresses this vulnerability.
4
What are the potential impacts of CVE-2018-7467 on affected systems?
Successful exploitation of CVE-2018-7467 can allow an attacker to access restricted directories and files on the server.
5
How do I mitigate CVE-2018-7467?
To mitigate CVE-2018-7467, ensure that you update AxxonSoft Axxon Next to the latest version and configure server settings to prevent directory traversal.