PT-2021-20285 · Siemens · Teamcenter Active Workspace

Published 2021-07-13 · Updated 2021-07-20 · CVE-2021-33709

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Teamcenter Active Workspace versions prior to 4.3.9 Teamcenter Active Workspace V5.0 versions prior to 5.0.7 Teamcenter Active Workspace V5.1 versions prior to 5.1.4

Description: A remote attacker could leak an application token by sending malformed requests due to an error not properly handled by the system.

Recommendations: For Teamcenter Active Workspace versions prior to 4.3.9, update to version 4.3.9 or later. For Teamcenter Active Workspace V5.0 versions prior to 5.0.7, update to version 5.0.7 or later. For Teamcenter Active Workspace V5.1 versions prior to 5.1.4, update to version 5.1.4 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2021-33709

Affected Products

Teamcenter Active Workspace

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-33709 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-622535.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-33709 · Vendor Advisory