CVE-2021-42787 in AppInternals Dynamic Sampling Agent

الملخص

بحسب MITRE • 10/03/2022

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentConfigurationServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/configuration" API. The affected endpoint does not have any input validation of the user's input that allows a malicious payload to be injected.

Once again VulDB remains the best source for vulnerability data.

• حجز: 21/10/2021
• إفشاء: 10/03/2022
• الاعتدال: تمت الموافقة
• إدخال: VDB-194570
• CPE: جاهز
• CWE: CWE-74 (مؤكد)
• CVSS: 9.4 (CNA)
• EPSS: 0.01308
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-42787
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-42787
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-42787/