CVE-2021-40357

4.9MEDIUM

Key Information:

Vendor
Siemens
Status
Teamcenter Active Workspace V4.3
Teamcenter Active Workspace V5.0
Teamcenter Active Workspace V5.1
Teamcenter Active Workspace V5.2
Vendor
CVE Published:
14 September 2021

Summary

A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions < V4.3.10), Teamcenter Active Workspace V5.0 (All versions < V5.0.8), Teamcenter Active Workspace V5.1 (All versions < V5.1.5), Teamcenter Active Workspace V5.2 (All versions < V5.2.1). A path traversal vulnerability in the application could allow an attacker to bypass certain restrictions such as direct access to other services within the host.

Affected Version(s)

Teamcenter Active Workspace V4.3 All versions < V4.3.10

Teamcenter Active Workspace V5.0 All versions < V5.0.8

Teamcenter Active Workspace V5.1 All versions < V5.1.5

References

https://cert-portal.siemens.com/productcert/pdf/ssa-41340...
x_refsource_MISC

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.