Vulnerabilities > Axway > File Tranfer Direct

DATE CVE VULNERABILITY TITLE RISK
2019-01-21 CVE-2019-6500 Path Traversal vulnerability in Axway File Tranfer Direct 2.7.1
In Axway File Transfer Direct 2.7.1, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request with %2e instead of '.' characters, as demonstrated by an initial /h2hdocumentation//%2e%2e/ substring.
network
low complexity
axway CWE-22
5.0