Security Advisory

CVE-2019-6500

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-01-21 06:00:00

Last updated 2024-08-04 20:23:22

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In Axway File Transfer Direct 2.7.1, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request with %2e instead of '.' characters, as demonstrated by an initial /h2hdocumentation//%2e%2e/ substring.

← Browse all CVEs View on cve.org ↗