PT-2021-20287 · Siemens · Teamcenter Active Workspace

Published 2021-07-13 · Updated 2021-07-20 · CVE-2021-33711

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Teamcenter Active Workspace versions prior to 4.3.9 Teamcenter Active Workspace V5.0 versions prior to 5.0.7 Teamcenter Active Workspace V5.1 versions prior to 5.1.4

Description: The issue allows the leaking of sensitive information, such as full paths, due to verbose error messages in the affected application.

Recommendations: For Teamcenter Active Workspace versions prior to 4.3.9, update to version 4.3.9 or later. For Teamcenter Active Workspace V5.0 versions prior to 5.0.7, update to version 5.0.7 or later. For Teamcenter Active Workspace V5.1 versions prior to 5.1.4, update to version 5.1.4 or later.

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2021-33711

Affected Products

Teamcenter Active Workspace

References · 3

• https://osv.dev/vulnerability/CVE-2021-33711 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-622535.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33711 · Security Note