REDHAT-BUG-1413028: Path Traversal
Published Jan 13, 2017
·Updated
A vulnerability in log file viewer of Wildfly server 10.x.x allowing arbitrary file read to authenticated attacker via path traversal was found.
Affected Software
1 affected component
Red Hat WildFly>=10.0.0
Event History
Jan 13, 2017
Data Sourced
via Red Hat·12:39 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-1413028?
The severity of REDHAT-BUG-1413028 is considered high due to the potential for arbitrary file read access.
2
How do I fix REDHAT-BUG-1413028?
To fix REDHAT-BUG-1413028, it is recommended to upgrade to the latest version of Wildfly that addresses this vulnerability.
3
Who is affected by REDHAT-BUG-1413028?
Any authenticated user of Red Hat Wildfly server version 10.x.x is potentially affected by REDHAT-BUG-1413028.
4
What kind of vulnerability is REDHAT-BUG-1413028?
REDHAT-BUG-1413028 is a path traversal vulnerability that allows authenticated attackers to read arbitrary files.
5
Is there a workaround for REDHAT-BUG-1413028?
A workaround for REDHAT-BUG-1413028 is to restrict access to the log file viewer or implement stricter input validation.