CVEvulnerability
CVE-2021-32017
7.7 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-08-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.9 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.7 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Description
An issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the listing of the content of the remote file system. This can be used to identify the complete server filesystem structure, i.e., identifying all the directories and files.
Affected configurations
• jump-technology asset management 3.6.0.04.009-2487
References
- https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-32017 cds.thalesgroup.com
- https://excellium-services.com/cert-xlm-advisory/cve-2021-32017/ Third Party Advisory
- https://excellium-services.com/cert-xlm-advisory/cve-2021-32017/ Third Party Advisory