by Kastro
Paper/Archive/CVE-2021-32016

CVE-2021-32016

mitre — An issue was discovered in JUMP AMS 3.6.0.04.009-2487.

EPSS 2%CVSS 9.9
critical.is priorityof 100
46
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 83.1.831 × 2016.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the writing of arbitrary files to a user-controlled location on the remote filesystem (with user-controlled content) via directory traversal, potentially leading to remote code and command execution.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

mitre (CNA)9.9CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N

References

refexcellium-services.com/cert-xlm-advisory/cve-2021-32016refcds.thalesgroup.com/en/tcs-cert/CVE-2021-32016