REDHAT-BUG-1607709: Path Traversal

Q: What is the severity of REDHAT-BUG-1607709?

The severity of REDHAT-BUG-1607709 is classified as high due to the potential for unauthorized file access.

Q: How do I fix REDHAT-BUG-1607709?

To fix REDHAT-BUG-1607709, upgrade Eclipse Mojarra to version 2.3.5 or later.

Q: What systems are affected by REDHAT-BUG-1607709?

Systems running Eclipse Mojarra versions prior to 2.3.5 are affected by REDHAT-BUG-1607709.

Q: What type of vulnerability is REDHAT-BUG-1607709?

REDHAT-BUG-1607709 is a path traversal vulnerability that allows attackers to read arbitrary files.

Q: How can an attacker exploit REDHAT-BUG-1607709?

An attacker can exploit REDHAT-BUG-1607709 by manipulating the loc parameter in the ResourceManager.java:getLocalePrefix() function.

Published Jul 24, 2018

Updated

Eclipse Mojarra before version 2.3.5 is vulnerable to a path traversal falw in the ResourceManager.java:getLocalePrefix() function via the loc parameter. An attacker could exploit this to read arbitrary files.

Upstream Patch:

https://github.com/eclipse-ee4j/mojarra/commit/1b434748d9239f42eae8aa7d37d7a0930c061e24

Affected Software

1 affected component

Eclipse Mojarra<2.3.5

Event History

Jul 24, 2018

Data Sourced

via Red Hat·05:51 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1607709?

The severity of REDHAT-BUG-1607709 is classified as high due to the potential for unauthorized file access.

How do I fix REDHAT-BUG-1607709?

To fix REDHAT-BUG-1607709, upgrade Eclipse Mojarra to version 2.3.5 or later.

What systems are affected by REDHAT-BUG-1607709?

Systems running Eclipse Mojarra versions prior to 2.3.5 are affected by REDHAT-BUG-1607709.

What type of vulnerability is REDHAT-BUG-1607709?

REDHAT-BUG-1607709 is a path traversal vulnerability that allows attackers to read arbitrary files.

How can an attacker exploit REDHAT-BUG-1607709?