What’s Vulnerable › Vulnerabilities
CVE-2014-0115
- Severity: high (CVSS 7.5 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 5.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2017-10-30 · updated 2026-06-17
- Weakness: CWE-22
Description
Directory traversal vulnerability in the log viewer in Apache Storm 0.9.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to log.
Affected products
References
- https://issues.apache.org/jira/browse/STORM-269
- https://mail-archives.apache.org/mod_mbox/storm-dev/201404.mbox/%3CJIRA.12704141.1395964296891.201561.1398799995645%40arcas%3E
- https://issues.apache.org/jira/browse/STORM-269
- https://mail-archives.apache.org/mod_mbox/storm-dev/201404.mbox/%3CJIRA.12704141.1395964296891.201561.1398799995645%40arcas%3E
Get alerted when CVE-2014-0115 or the next vulnerability affects your stack