Arbitrary File Read Vulnerability in Red Hat JBoss Enterprise Application Log File Viewer

Arbitrary File Read Vulnerability in Red Hat JBoss Enterprise Application Log File Viewer

CVE-2017-2595 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:N/A:N

It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal.

Learn more about our User Device Pen Test.