Uploaded image for project: 'JBoss AS Patches'
  1. JBoss AS Patches
  2. ASPATCH-126

JBAS-3861: DeploymentFileRepository can be used to write/remove arbitrary files in the filesystem

    Details

    • Type: Support Patch
    • Status: Resolved (View Workflow)
    • Priority: Critical
    • Resolution: Done
    • Affects Version/s: JBossAS-3.2.5 Final, JBossAS-3.2.6 Final, JBossAS-3.2.7 Final, JBossAS-3.2.8 Final, JBossAS-3.2.8.SP1, JBossAS-4.0.0 Final, JBossAS-4.0.1 Final, JBossAS-4.0.1 SP1, JBossAS-4.0.2 Final, JBossAS-4.0.3 Final, JBossAS-4.0.3 SP1, JBossAS-4.0.4.GA
    • Fix Version/s: None
    • Labels:
      None
    • Support Case Reference:
    • Patch Instructions:
      Hide
      See the linked JBAS-3861 to find out how to patch the vulnerability.
      Show
      See the linked JBAS-3861 to find out how to patch the vulnerability.

      Description

      Please see JBAS-3861 for details on how to resolve this vulnerability.

        Gliffy Diagrams

          Attachments

            Issue Links

            is blocked by

            Bug - A problem which impairs or prevents the functions of the product. JBAS-3861 DeploymentFileRepository can be used to write/remove arbitrary files in the filesystem

            • Critical - An upcoming version that is affected by this issue cannot be released until it's addressed. A critical bug is one that crashes the application, causes loss of data or severe memory leak.
            • Closed

              Activity

                People

                • Assignee:
                  jbn-patch-team JBN Patch Team list
                  Reporter:
                  alex.pinkin Alex Pinkin (Inactive)
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  2 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: