Lucene search
DellCVELIST:CVE-2021-21586HistoryJul 15, 2021 - 4:15 p.m.
CVE-2021-21586
2021-07-1516:15:12
CWE-36
dell
www.cve.org
3
wyse management suite
absolute path traversal
vulnerability
remote authenticated
malicious user
exploit
read arbitrary files
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.9
Confidence
High
EPSS
0.002
Percentile
53.5%
Wyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability. A remote authenticated malicious user could exploit this vulnerability in order to read arbitrary files on the system.
CNA Affected
[
{
"product": "Wyse Management Suite",
"vendor": "Dell",
"versions": [
{
"lessThan": "3.3",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]References
Related
prion
prion
Path traversal
2021-07-15 17:15:00
cve
cve
CVE-2021-21586
2021-07-15 17:15:08
nvd
nvd
CVE-2021-21586
2021-07-15 17:15:08
cnvd
cnvd
Wyse Management Suite path traversal vulnerability
2021-07-16 00:00:00
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.9
Confidence
High
EPSS
0.002
Percentile
53.5%
Related for CVELIST:CVE-2021-21586