Unrated severityNVD Advisory· Published Jan 21, 2019· Updated Aug 4, 2024

CVE-2019-6500

Description

In Axway File Transfer Direct 2.7.1, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request with %2e instead of '.' characters, as demonstrated by an initial /h2hdocumentation//%2e%2e/ substring.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Axway/File Transfer Directllm-create
Range: =2.7.1

Patches

Vulnerability mechanics

References

github.com/inf0seq/inf0seq.github.io/blob/master/_posts/2019-01-20-Directory-Traversal-in-Axway-File-Transfer-Direct.mdmitrex_refsource_MISC
inf0seq.github.io/cve/2019/01/20/Directory-Traversal-in-Axway-File-Transfer-Direct.htmlmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000