It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) PluginServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/plugin/pmx" API. The affected endpoint does not have any input validation of the user's input that allows a malicious payload to be injected.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: GovTech CSG
Published: 2022-03-09T16:52:02.819876Z
Updated: 2024-09-16T17:54:38.635Z
Reserved: 2021-10-25T00:00:00
Link: CVE-2021-42854
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-03-10T17:44:06.840
Modified: 2024-11-21T06:28:13.940
Link: CVE-2021-42854
Redhat
No data.