PT-2022-11690

Name of the Vulnerable Software and Affected Versions SteelCentral AppInternals Dynamic Sampling Agent DSA affected versions not specified Description The issue concerns Remote Code Execution vulnerabilities found in multiple instances of API requests within the SteelCentral AppInternals Dynamic...

CVE-2021-42786: Improper Input Validation

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent DSA has Remote Code Execution vulnerabilities in multiple instances of the API requests. The affected endpoints do not have any input validation of the user's input that allowed a malicious payload to be injected...

CVE-2021-42855: Improper Access Control

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent DSA uses the ".debugcommand.config" file to store a json string that contains a list of IDs and pre-configured commands. The config file is subsequently used by the "/api/appInternals/1.0/agent/configuration" API to map t...