PT-2022-11691

Name of the Vulnerable Software and Affected Versions SteelCentral AppInternals Dynamic Sampling Agent affected versions not specified Description The issue concerns directory traversal vulnerabilities in the AgentConfigurationServlet of the SteelCentral AppInternals Dynamic Sampling Agent...

CVE-2021-42855: Improper Access Control

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent DSA uses the ".debugcommand.config" file to store a json string that contains a list of IDs and pre-configured commands. The config file is subsequently used by the "/api/appInternals/1.0/agent/configuration" API to map t...

CVE-2021-42787: Improper Input Validation

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's DSA AgentConfigurationServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/configuration" API. The affected endpoint does not have any input validation of the user's input that allows a...