Medium severity · published Jun 2, 2021
CVE-2020-6950
Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter
6.5
CVSS
10.1%
EPSS
No
On KEV
Description
Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)10.1% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BE
Banking Enterprise Default Management · Oracle
2.10.0; 2.12.0 · source: NVD
BP
Banking Platform · Oracle
2.6.2; 2.7.1; 2.9.0; 2.12.0 · source: NVD
CN
Communications Network Integrity · Oracle
7.3.6 · source: NVD
CP
Communications Pricing Design Center · Oracle
12.0.0.3.0 · source: NVD
HC
Hyperion Calculation Manager · Oracle
before 11.2.8.0 · source: NVD
MO
Mojarra · Eclipse
before 2.3.14 · source: NVD
RM
Retail Merchandising System · Oracle
19.0.1 · source: NVD
SC
Solaris Cluster · Oracle
4.0 · source: NVD
TA
Time And Labor · Oracle
12.2.6 through 12.2.11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-6950
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-6950
Issue Tracking
https://bugs.eclipse.org/bugs/show_bug.cgi?id=550943
Patch
https://github.com/eclipse-ee4j/mojarra/commit/cefbb9447e7be560e59da2da6bd7cb93776f7741
Issue Tracking
https://github.com/eclipse-ee4j/mojarra/issues/4571
Patch
https://www.oracle.com/security-alerts/cpuapr2022.html
Patch
https://www.oracle.com/security-alerts/cpujan2022.html
Patch
https://www.oracle.com/security-alerts/cpuoct2021.html
More from Mojarra
7.5
CVE-2026-46581
In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly sanitize and/or block remote URLs, allowing an attacker to specify a URL to…
7.5
CVE-2018-14371
The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter
6.1
CVE-2019-17091
faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS…