CVE-2014-7816: Improper Limitation of a Pathname to a Restricted Directory in JBoss Undertow
Summary
CVE-2014-7816: Improper Limitation of a Pathname to a Restricted Directory in JBoss Undertow. Affects io.undertow:undertow-core across 3 version ranges.
>= 1.0.0, < 1.0.17
>= 1.1.0.Beta1, < 1.1.0.CR5
>= 1.2.0.Beta1, < 1.2.0.Beta3
Fixed in 1.0.17, 1.1.0.CR5 or 1.2.0.Beta3, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
JBoss Undertow is a lightweight web server and servlet container designed for high performance and scalability. It is commonly used in Java-based web applications. The vulnerability identified as CVE-2014-7816 is a directory traversal vulnerability that affects JBoss Undertow versions 1.0.x, 1.1.x, and 1.2.x when running on Windows. This vulnerability allows remote attackers to read arbitrary files by exploiting a directory traversal flaw in the resource URI.
Vulnerability Detail
The vulnerability arises due to the improper limitation of a pathname to a restricted directory. When JBoss Undertow is running on Windows, an attacker can manipulate the resource URI by including '..' (dot dot) sequences to traverse directories and access files outside the intended scope. By exploiting this vulnerability, an attacker can read sensitive files on the system, potentially leading to unauthorized access, data leakage, or further compromise of the application or system.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 1.0.0, < 1.0.171.0.17 -
>= 1.1.0.Beta1, < 1.1.0.CR51.1.0.CR5 -
>= 1.2.0.Beta1, < 1.2.0.Beta31.2.0.Beta3
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
If upgrading to a fixed version is not immediately feasible, a temporary workaround can be implemented by configuring the web server or application firewall to block requests containing '..' sequences in the resource URI. This can help mitigate the risk of exploitation until a proper fix can be applied.
Conclusion
The directory traversal vulnerability in JBoss Undertow can be mitigated by upgrading to the fixed versions mentioned above. It is crucial to promptly apply the necessary patches or updates to ensure the security and integrity of the application. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for io.undertow:undertow-core →
FAQ
JBoss Undertow is a lightweight web server and servlet container designed for high performance and scalability. It is commonly used in Java-based web applications.
A directory traversal vulnerability allows an attacker to access files outside the intended scope of an application by manipulating file paths or resource URIs.
This vulnerability allows remote attackers to read arbitrary files on a Windows system running JBoss Undertow by exploiting a directory traversal flaw in the resource URI.
By exploiting this vulnerability, an attacker can gain unauthorized access to sensitive files, potentially leading to data leakage, unauthorized information disclosure, or further compromise of the application or system.
To fix this vulnerability, it is recommended to upgrade to a fixed version of JBoss Undertow. Details of the fixed versions for each affected version can be found in the 'how_to_fix' section.
Related vulnerabilities
Recent vulnerabilities recorded for io.undertow:undertow-core.
