Upstream information
Description
Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager.SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having important severity.
National Vulnerability Database | |
---|---|
Base Score | 7.5 |
Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Access Vector | Network |
Access Complexity | Low |
Authentication | None |
Confidentiality Impact | Partial |
Integrity Impact | Partial |
Availability Impact | Partial |
SUSE Security Advisories:
- SUSE-SR:2007:002, published Fri, 26 Jan 2007 17:00:00 +0000
- TID3024921, published Sa 3. Mär 12:03:53 CET 2018
SUSE Timeline for this CVE
CVE page created: Fri Jun 28 05:16:26 2013CVE page last modified: Fri Dec 8 16:18:21 2023