laptop and a wrench

Bug

Directory traversal vulnerability in ArcGIS Server.

Last Published: September 9, 2022 ArcGIS GIS Server
Bug ID Number BUG-000152121
SubmittedSeptember 6, 2022
Last ModifiedMarch 6, 2023
Applies toArcGIS GIS Server
Version found10.9.1
Operating SystemN/A
Operating System VersionN/A
Version Fixed11.1
StatusFixed

Additional Information

This defect is resolved for versions 11.0 and 10.9 in the ArcGIS Server Directory Traversal Vulnerability Patch which is now live on the Esri Support site. The URL is: https://support.esri.com/en/download/8063 This defect is resolved for versions 10.9.1, 10.8.1, and 10.7.1 in the ArcGIS Server Security 2022 Update 2 Patch which is now live on the Esri Support site. The URL is: https://support.esri.com/en/download/8064

Workaround

The ArcGIS Server Directory Traversal Vulnerability Patch is now live on the support site. The URL is:

https://support.esri.com/en/download/8063

Summary

This security patch addresses a security vulnerability found in ArcGIS Server. Esri recommends that all customers using ArcGIS Server 11.0 and 10.9 apply this patch.

Steps to Reproduce

Bug ID: BUG-000152121

Software:

  • ArcGIS GIS Server

Get help from ArcGIS experts

Contact technical support

Download the Esri Support App

Go to download options

Discover more on this topic

Esri Community

Search for related information

Training

Find training related to this topic

ArcGIS Ideas

Explore ideas and give feedback