CVE-2015-2856 | BDVDB-2026-91352 Detail

Description#

Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attackers to read arbitrary files via a .. (dot dot) in the statecode cookie.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.rapid7.com/db/modules/auxiliary/scanner/http/accellion_fta_statecode_file_read

Exploit#

No public exploit known

History#

Version 12017-10-10Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.