It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDaServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/da/pcf" API. The affected endpoint does not have any validation of the user's input that allows a malicious payload to be injected.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: GovTech CSG
Published: 2022-03-09T16:51:44.553702Z
Updated: 2024-09-16T21:57:35.235Z
Reserved: 2021-10-25T00:00:00
Link: CVE-2021-42857
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-03-10T17:44:08.953
Modified: 2024-11-21T06:28:14.313
Link: CVE-2021-42857
Redhat
No data.