CVE-2021-44138: Path Traversal
Published Apr 4, 2022
·Updated
There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read files in arbitrary directories via a ; in a pathname within an HTTP request.
Affected Software
1 affected component
Caucho Resin>=4.0.52<=4.0.56
Event History
Apr 4, 2022
CVE Published
via MITRE·12:03 PM
Data Sourced
via MITRE·12:03 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-44138?
CVE-2021-44138 has been classified with a medium severity due to its potential to allow unauthorized file access.
2
How do I fix CVE-2021-44138?
To fix CVE-2021-44138, updating Caucho Resin to version 4.0.57 or later is recommended.
3
What is the impact of CVE-2021-44138 on my server?
CVE-2021-44138 can allow remote attackers to read sensitive files from arbitrary directories, compromising server security.
4
What versions of Caucho Resin are affected by CVE-2021-44138?
CVE-2021-44138 affects Caucho Resin versions 4.0.52 to 4.0.56.
5
How can I test if my system is vulnerable to CVE-2021-44138?
You can test for CVE-2021-44138 by attempting to access files outside the intended directory structure using specially crafted HTTP requests.