Vulnerability Details CVE-2015-2856
Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attackers to read arbitrary files via a .. (dot dot) in the statecode cookie.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.712
EPSS Ranking 98.6%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2015-2856
-
cpe:2.3:a:accellion:file_transfer_appliance:8_0_540
-
cpe:2.3:a:accellion:file_transfer_appliance:9_11_200
-
cpe:2.3:a:accellion:file_transfer_appliance:9_11_210
-
cpe:2.3:a:accellion:file_transfer_appliance:9_12_180