It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentConfigurationServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/configuration" API. The affected endpoint does not have any input validation of the user's input that allows a malicious payload to be injected.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: GovTech CSG

Published: 2022-03-09T16:51:50.594465Z

Updated: 2024-09-16T22:35:02.277Z

Reserved: 2021-10-21T00:00:00

Link: CVE-2021-42787

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-03-10T17:44:05.807

Modified: 2024-11-21T06:28:10.580

Link: CVE-2021-42787

cve-icon Redhat

No data.