CVE-2021-42787

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's DSA AgentConfigurationServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/configuration" API. The affected endpoint does not have any input validation of the user's input that allows a...

CVE-2021-42854 Directory Traversal Read/Write/Delete at PluginServlet

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's DSA PluginServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/plugin/pmx" API. The affected endpoint does not have any input validation of the user's input that allows a malicious payload to be...

CVE-2021-42855 Local privilege escalation due to misconfigured write permission on .debug_command.config file

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent DSA uses the ".debugcommand.config" file to store a json string that contains a list of IDs and pre-configured commands. The config file is subsequently used by the "/api/appInternals/1.0/agent/configuration" API to map t...

CVE-2021-42853: Improper Input Validation

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's DSA AgentDiagnosticServlet has directory traversal vulnerability at the "/api/appInternals/1.0/agent/diagnostic/logs" API. The affected endpoint does not have any input validation of the user's input that allows a...

PT-2022-11690

Name of the Vulnerable Software and Affected Versions SteelCentral AppInternals Dynamic Sampling Agent DSA affected versions not specified Description The issue concerns Remote Code Execution vulnerabilities found in multiple instances of API requests within the SteelCentral AppInternals Dynamic...

PT-2022-11710

Name of the Vulnerable Software and Affected Versions SteelCentral AppInternals Dynamic Sampling Agent affected versions not specified Description The issue concerns directory traversal vulnerabilities in the SteelCentral AppInternals Dynamic Sampling Agent's PluginServlet. Specifically, the...

PT-2022-11713

Name of the Vulnerable Software and Affected Versions SteelCentral AppInternals Dynamic Sampling Agent affected versions not specified Description The issue concerns a directory traversal vulnerability in the AgentDaServlet of the SteelCentral AppInternals Dynamic Sampling Agent. This vulnerabili...

CVE-2021-42787: Improper Input Validation

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's DSA AgentConfigurationServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/configuration" API. The affected endpoint does not have any input validation of the user's input that allows a...

PT-2022-11691

Name of the Vulnerable Software and Affected Versions SteelCentral AppInternals Dynamic Sampling Agent affected versions not specified Description The issue concerns directory traversal vulnerabilities in the AgentConfigurationServlet of the SteelCentral AppInternals Dynamic Sampling Agent...

CVE-2021-42857: Improper Input Validation

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's DSA AgentDaServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/da/pcf" API. The affected endpoint does not have any validation of the user's input that allows a malicious payload to be...

PT-2022-11709

Name of the Vulnerable Software and Affected Versions SteelCentral AppInternals Dynamic Sampling Agent affected versions not specified Description A directory traversal issue was found in the AgentDiagnosticServlet of the SteelCentral AppInternals Dynamic Sampling Agent. The...

CVE-2021-42855: Improper Access Control

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent DSA uses the ".debugcommand.config" file to store a json string that contains a list of IDs and pre-configured commands. The config file is subsequently used by the "/api/appInternals/1.0/agent/configuration" API to map t...

CVE-2021-42854: Improper Input Validation

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's DSA PluginServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/plugin/pmx" API. The affected endpoint does not have any input validation of the user's input that allows a malicious payload to be...

CVE-2021-42786: Improper Input Validation

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent DSA has Remote Code Execution vulnerabilities in multiple instances of the API requests. The affected endpoints do not have any input validation of the user's input that allowed a malicious payload to be injected...

CVE-2021-42857

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's DSA AgentDaServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/da/pcf" API. The affected endpoint does not have any validation of the user's input that allows a malicious payload to be...