Unscored severity · published Nov 27, 2006
CVE-2006-5750
Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows remote authenticated users to read or…
–
CVSS
14.7%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager.
Exploitation
Is it being used?
Exploit prediction (EPSS)14.7% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JA
Jboss Application Server · Jboss
3.2.5_final; 3.2.6_final; 3.2.7_final; 3.2.8.sp1; 3.2.8_final; 4.0.0_final; +6 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5750
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5750
h20000.www2.hp.com
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01390402
jira.jboss.com
http://jira.jboss.com/jira/browse/ASPATCH-126
jira.jboss.com
http://jira.jboss.com/jira/browse/JBAS-3861
secunia.com
http://secunia.com/advisories/23095
secunia.com
http://secunia.com/advisories/23984
secunia.com
http://secunia.com/advisories/24104
More from Jboss Application Server
–
CVE-2007-1354
The Access Control functionality (JMXOpsAccessControlFilter) in JMX Console in JBoss Application Server 4.0.2 and 4.0.5 before 20070416 uses a member variable to store the roles…
–
CVE-2007-1036
The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attackers to bypass authentication and gain…