Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on Windows allow remote attackers to upload files to arbitrary directories via directory traversal sequences in the (1) group, (2) artifact, (3) version, or (4) fileType parameter to console/portal//Services/Repository (aka the Services/Repository portlet); the (5) createDB parameter to console/portal/Embedded DB/DB Manager (aka the Embedded DB/DB Manager portlet); or the (6) filename parameter to the createKeystore script in the Security/Keystores portlet.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo
    Application Server 2.1 through 2.1.3 on Windows allow remote attackers to upload files to arbitrary
    directories via directory traversal sequences in the (1) group, (2) artifact, (3) version, or (4) fileType
    parameter to console/portal//Services/Repository (aka the Services/Repository portlet); the (5) createDB
    parameter to console/portal/Embedded DB/DB Manager (aka the Embedded DB/DB Manager portlet); or the (6)
    filename parameter to the createKeystore script in the Security/Keystores portlet. (CVE-2008-5518)

This update of WebSphere fixes the following vulnerabilities :

  - GERONIMO-3838: close potential denial of service attack

  - fix Apache Geronimo web administration console directory     traversal vulnerabilities. (CVE-2008-5518)

  - fix Apache Geronimo web administration console XSS     vulnerabilities. (CVE-2009-0038)

  - fix Apache Geronimo web administration console CSRF     vulnerabilities. (CVE-2009-0039)

  - Samples: Fix Apache Tomcat cross-site scripting     vulnerability. (CVE-2009-0781)

ID	Name	Product	Family	Severity
437331	SCA: security update for org.apache.geronimo.plugins:console (GHSA-xm92-rf24-h74w)	Tenable Cloud Security	SCA Checks	critical
437331	SCA: security update for org.apache.geronimo.plugins:console (GHSA-xm92-rf24-h74w)	Tenable Self-Hosted Container Security	SCA Checks	critical
52690	SuSE 11 Security Update : Websphere Community Edition (SAT Patch Number 1016)	Nessus	SuSE Local Security Checks	high
41597	SuSE 10 Security Update : Websphere Community Edition (ZYPP Patch Number 6312)	Nessus	SuSE Local Security Checks	high
41458	SuSE 11 Security Update : Websphere Community Edition (SAT Patch Number 1016)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2008-5518

critical

Tenable Plugins

critical

critical

high

high

high