CVE-2015-2856

Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attackers to read arbitrary files via a .. (dot dot) in the statecode cookie.

Date published : 2017-10-10

https://www.rapid7.com/db/modules/auxiliary/scanner/http/accellion_fta_statecode_file_read