high7.5
CVE-2015-2856
Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attac…
Impact
Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attackers to read arbitrary files via a .. (dot dot) in the statecode cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Accellion | File Transfer Appliance | through fta_9_11_200 |