CVE-2021-42853

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's DSA AgentDiagnosticServlet has directory traversal vulnerability at the "/api/appInternals/1.0/agent/diagnostic/logs" API. The affected endpoint does not have any input validation of the user's input that allows a...

CVE-2021-42853

CVE-2021-42853 concerns directory traversal in the SteelCentral AppInternals Dynamic Sampling Agent (DSA), specifically the AgentDiagnosticServlet at the /api/appInternals/1.0/agent/diagnostic/logs endpoint. The root cause, as described in the sources, is that this endpoint performs no input vali...