CVE-2015-2856

Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attackers to read arbitrary files via a .. (dot dot) in the statecode cookie.
Configurations

Configuration 1 (hide)

cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-10-10 13:29

Updated : 2023-12-10 12:15


NVD link : CVE-2015-2856

Mitre link : CVE-2015-2856

CVE.ORG link : CVE-2015-2856


JSON object : View

Products Affected

accellion

  • file_transfer_appliance
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')