Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Riverbed Component: Steelcentral Appinternals Dynamic Sampling Agent Clear all filters
TI-2021-19013 CVE-2021-42854 · GHSA-6p9c-r989-4c78

Directory Traversal Read/Write/Delete at PluginServlet

Priority MEDIUM 45

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) PluginServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/plugin/pmx" API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01568 Published 2022-03-09 Fixed in 12.13.0, 11.8.8 CWE-20
TI-2021-19015 CVE-2021-42856 · GHSA-4gxc-qfxh-4hf6

Reflected Cross-site Scripting at DsaDataTest

Priority LOW 28

It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting (XSS) attack.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00604 Published 2022-03-09 Fixed in 12.13.0, 11.8.8 CWE-20
TI-2021-18989 CVE-2021-42787 · GHSA-r7hm-v888-gvg3

Directory Traversal Write/Delete/Partial Read at AgentConfigurationServlet

Priority MEDIUM 45

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentConfigurationServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/configuration" API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01328 Published 2022-03-09 Fixed in 12.13.0, 11.8.8 CWE-20
TI-2021-19016 CVE-2021-42857 · GHSA-wcq9-68x2-x82m

Directory Traversal Partial Write at AgentDaServlet

Priority LOW 26

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDaServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/da/pcf" API.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0115 Published 2022-03-09 Fixed in 12.13.0, 11.8.8 CWE-20
TI-2021-18988 CVE-2021-42786 · GHSA-5mv9-9mfh-fm86

Remote Code Execution at AgentControllerServlet

Priority MEDIUM 46

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) has Remote Code Execution vulnerabilities in multiple instances of the API requests.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02086 Published 2022-03-09 Fixed in 12.13.0, 11.8.8 CWE-20
TI-2021-19012 CVE-2021-42853 · GHSA-qppm-h93j-jpq8

Directory Traversal Delete/Read at AgentDiagnosticServlet

Priority MEDIUM 45

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDiagnosticServlet has directory traversal vulnerability at the "/api/appInternals/1.0/agent/diagnostic/logs" API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01568 Published 2022-03-09 Fixed in 12.13.0, 11.8.8 CWE-20