PT-2019-18122 · Axway · Axway File Transfer Direct

Publicado 2019-01-21 · Atualizado 2019-02-08 · CVE-2019-6500

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Axway File Transfer Direct version 2.7.1

Description The issue allows for an unauthenticated Directory Traversal by issuing a specially crafted HTTP GET request. This can be achieved by using %2e instead of '.' characters in the request, as shown in an example with the substring /h2hdocumentation//%2e%2e/.

Recommendations For Axway File Transfer Direct version 2.7.1, consider restricting access to the HTTP GET request endpoint to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the %2e character in requests to prevent potential directory traversal attacks.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2019-6500

Produtos afetados

Axway File Transfer Direct

Referências · 4

• 🔥 https://github.com/inf0seq/inf0seq.github.io/blob/master/_posts/2019-01-20-Directory-Traversal-in-Axway-File-Transfer-Direct.md · Exploit
• 🔥 https://inf0seq.github.io/cve/2019/01/20/Directory-Traversal-in-Axway-File-Transfer-Direct.html · Exploit
• https://osv.dev/vulnerability/CVE-2019-6500 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-6500 · Nota de Segurança