[jboss-jira] [JBoss JIRA] Deleted: (JBCOMMON-107) CVE-2009-2693
[
https://jira.jboss.org/jira/browse/JBCOMMON-107?page=com.atlassian.jira.p...
]
Mike Millson deleted JBCOMMON-107:
----------------------------------
CVE-2009-2693
-------------
Key: JBCOMMON-107
URL: https://jira.jboss.org/jira/browse/JBCOMMON-107
Project: JBoss Common
Issue Type: Bug
Security Level: Public(Everyone can see)
Reporter: Mike Millson
Assignee: Mike Millson
CVE-2009-2693,: When deploying WAR files, the WAR files were not checked for directory
traversal attempts. This allows an attacker to create arbitrary content outside of the web
root by including entries such as ../../bin/catalina.sh in the WAR
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira