CVE-2016-7041 MEDIUM

CVE-2016-7041

Vendor Red Hat

Product Drools Workbench

Weakness CWE-22 · Path traversal

Published September 10, 2018

Last update August 6, 2024

View on NVD All CVEs

CVSS base score

6.5/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to bypass the directory restrictions and retrieve arbitrary files from the affected host.

Key dates

02Disclosure timeline

September 10, 2018 CVE published

August 6, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2016-7041 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/22.html

Related vulnerabilities

04Related CVE

CVE-2023-2435 Blog-in-Blog <= 2.0.0 - Authenticated (Editor+) Local File Inclusion via Shortcode CVE-2018-0420 Cisco Wireless LAN Controller Software Directory Traversal Vulnerability CVE-2025-27101 Broken Access Control in Opal filesystem's copy functionality exposes all user data CVE-2026-25895 FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API CVE-2022-25773 Relative Path Traversal in assets file upload