CVE-2021-32018

CVE-2021-32018 affects Jump AMS 3.6.0.04.009-2487 and is due to an improper limitation of file loading on the server filesystem in the JUMP SOAP API, enabling arbitrary file reads (directory traversal). Public records list CVSS metrics: CVSSv3.1 base 6.5 (Network, Low complexity, Privileges Low, ...

CVE-2021-32017

CVE-2021-32017 affects JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permits listing the content of the remote file system, enabling discovery of the complete server filesystem structure (directories and files). Public sources in the provided documents confirm impact at least to filesystem enu...

CVE-2021-32016

CVE-2021-32016 affects JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permits writing arbitrary files to a user-controlled location on the remote filesystem via directory traversal, potentially leading to remote code and command execution. The connected sources reiterate this description; no fu...