It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDiagnosticServlet has directory traversal vulnerability at the "/api/appInternals/1.0/agent/diagnostic/logs" API. The affected endpoint does not have any input validation of the user's input that allows a malicious payload to be injected.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: GovTech CSG

Published: 2022-03-09T16:51:28.521040Z

Updated: 2024-09-16T17:09:18.135Z

Reserved: 2021-10-25T00:00:00

Link: CVE-2021-42853

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-03-10T17:44:06.360

Modified: 2024-11-21T06:28:13.813

Link: CVE-2021-42853

cve-icon Redhat

No data.