Read the docs
TI-2021-19013 Aliases CVE-2021-42854GHSA-6p9c-r989-4c78

Directory Traversal Read/Write/Delete at PluginServlet

Priority MEDIUM 45CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) PluginServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/plugin/pmx" API. The affected endpoint does not have any input validation of the user's input that allows a malicious payload to be injected.

Why it matters now

EPSS 0.01568 75th percentileScored 2026-11-07
Fix Fixed SteelCentral AppInternals Dynamic Sampling Agent (Aternity): 12.13.0, 11.8.8

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
AternitySteelCentral AppInternals Dynamic Sampling Agent10.x; 12.13.0 to before 12.13.0; 11.8.8 to before 11.8.812.13.0, 11.8.8Patch availableCNA
  • SteelCentral AppInternals Dynamic Sampling Agent VendorAternity Affected 10.x; 12.13.0 to before 12.13.0; 11.8.8 to before 11.8.8 Fixed in 12.13.0, 11.8.8 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:riverbed:steelcentral_appinternals_dynamic_sampling_agent:*:*:*:*:*:*:*:*11.0.0 to before 11.8.8; 12.0.0 to before 12.13.0VulnerableRiverbed
cpe:2.3:a:riverbed:steelcentral_appinternals_dynamic_sampling_agent:10.0.0:*:*:*:*:*:*:*10.0.0VulnerableRiverbed
  • cpe:2.3:a:riverbed:steelcentral_appinternals_dynamic_sampling_agent:*:*:*:*:*:*:*:* Versions 11.0.0 to before 11.8.8; 12.0.0 to before 12.13.0 Vulnerable ·Riverbed
  • cpe:2.3:a:riverbed:steelcentral_appinternals_dynamic_sampling_agent:10.0.0:*:*:*:*:*:*:* Versions 10.0.0 Vulnerable ·Riverbed

Remediation

  • Fix · CNA SteelCentral AppInternals Dynamic Sampling Agent (Aternity) Fixed in 12.13.0, 11.8.8

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Aternity SteelCentral AppInternals Dynamic Sampling Agent 11.8.8, 12.13.0

    7 records Highest priority Priority MEDIUM 4 MEDIUM, 3 LOW

    Other records, highest priority first

    • TI-2021-18988 Remote Code Execution at AgentControllerServletPriority MEDIUM 46
    • TI-2021-19012 Directory Traversal Delete/Read at AgentDiagnosticServletPriority MEDIUM 45
    • TI-2021-18989 Directory Traversal Write/Delete/Partial Read at AgentConfigurationServletPriority MEDIUM 45
    Show all 7 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-42854
  2. 2026-10-03 Alias added: GHSA-6p9c-r989-4c78

References

Advisory 1

  • TI-2022-21624 Incorrect access control in Aternity agent in Riverbed Aternity before 12.1.4.27 allows… CVSS 3.1HIGH 7.8
  • TI-2016-04380 The web server in Aternity before 9.0.1 does not require authentication for… CVSS 3.0CRITICAL 9.8
  • TI-2021-18988 Remote Code Execution at AgentControllerServlet CVSS 3.1CRITICAL 9.8
  • TI-2021-19012 Directory Traversal Delete/Read at AgentDiagnosticServlet CVSS 3.1CRITICAL 9.8
  • TI-2021-18989 Directory Traversal Write/Delete/Partial Read at AgentConfigurationServlet CVSS 3.1CRITICAL 9.8
  • TI-2021-19014 Local privilege escalation due to misconfigured write permission on .debug_command.config file CVSS 3.1HIGH 7.8
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences