CVE-2019-4442: Path Traversal
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9,0 could allow a remote attacker to traverse directories on the file system. An attacker could send a specially-crafted URL request to view arbitrary files on the system but not content. IBM X-Force ID: 163226.
Other sources
IBM WebSphere Application Server could allow a remote attacker to traverse directories on the file system. An attacker could send a specially-crafted URL request to view arbitrary files on the system but not content.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-4442?
CVE-2019-4442 has been assigned a high severity level due to its potential for remote file system traversal attacks.
How do I fix CVE-2019-4442?
To fix CVE-2019-4442, upgrade your IBM WebSphere Application Server to a version that is not vulnerable, specifically above the affected versions.
Which versions of IBM WebSphere Application Server are affected by CVE-2019-4442?
CVE-2019-4442 affects IBM WebSphere Application Server versions 7.0 through 9.0, specifically up to version 9.0.5.1.
What kind of attacks can exploit CVE-2019-4442?
CVE-2019-4442 can be exploited by remote attackers using specially-crafted URL requests to traverse directories on the file system.
Is file content exposed through CVE-2019-4442?
No, CVE-2019-4442 allows viewing of file names and paths without exposing the actual content of the files.