| Package | Affected versions | Patched versions |
|---|---|---|
| jboss application server | = 3.2.5_final= 3.2.6_final= 3.2.7_final= 3.2.8.sp1= 3.2.8_final= 4.0.0_final= 4.0.1_final= 4.0.1_sp1= 4.0.2_final= 4.0.3_final= 4.0.4.ga= 4.0.5.ga |
Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free