JBoss 4.2.1.GA Application Server Directory Traversal Vulnerability

[vyk0522]

I have an issue in my application. Attacker can manipulate the paths associated with files used by the application. it could print the contents of arbitrary files on the system.

Any help how can I get rid of this issue?

I am using JBoss 4.2.1.GA

Thanks

[mbabacek]

Wow, 9+ years old AS  

Dear Vivek, without any further details, it is impossible to tell whether it's your application's fault or the JBoss AS fault.

Both is very well possible, especially given the amount of remotely exploitable vulnerabilities your JBoss 4.2.1.GA probably contains.

Could you try with an AS from this decade, e.g. AS7 or WildFly, or is your app JBoss 4 dependant?