You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Path to dependency file: hadoop-crypto/hadoop-crypto/build.gradle
Path to vulnerable library: canner/.gradle/caches/modules-2/files-2.1/com.jcraft/jsch/0.1.42/a86104b0f2e0c0bab5b0df836065823a99b5e334/jsch-0.1.42.jar,/home/wss-scanner/.gradle/caches/modules-2/files-2.1/com.jcraft/jsch/0.1.42/a86104b0f2e0c0bab5b0df836065823a99b5e334/jsch-0.1.42.jar
Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.
CVE-2016-5725 - Medium Severity Vulnerability
Vulnerable Library - jsch-0.1.42.jar
JSch is a pure Java implementation of SSH2
Library home page: http://www.jcraft.com/jsch/
Path to dependency file: hadoop-crypto/hadoop-crypto/build.gradle
Path to vulnerable library: canner/.gradle/caches/modules-2/files-2.1/com.jcraft/jsch/0.1.42/a86104b0f2e0c0bab5b0df836065823a99b5e334/jsch-0.1.42.jar,/home/wss-scanner/.gradle/caches/modules-2/files-2.1/com.jcraft/jsch/0.1.42/a86104b0f2e0c0bab5b0df836065823a99b5e334/jsch-0.1.42.jar
Dependency Hierarchy:
Found in HEAD commit: c87ffc6b57551c0ce1c2ffa481dbff77be9b0e38
Vulnerability Details
Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.
Publish Date: 2017-01-19
URL: CVE-2016-5725
CVSS 3 Score Details (5.9)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5725
Release Date: 2017-01-19
Fix Resolution: 0.1.54
⛑️ Automatic Remediation is available for this issue
The text was updated successfully, but these errors were encountered: