PT-2021-22875 · Siemens · Teamcenter Active Workspace

Published 2021-09-14 · Updated 2021-09-28 · CVE-2021-40357

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Teamcenter Active Workspace versions prior to V4.3.10 Teamcenter Active Workspace versions prior to V5.0.8 Teamcenter Active Workspace versions prior to V5.1.5 Teamcenter Active Workspace versions prior to V5.2.1

Description A path traversal vulnerability in the application could allow an attacker to bypass certain restrictions, such as direct access to other services within the host.

Recommendations For versions prior to V4.3.10, update to V4.3.10 or later. For versions prior to V5.0.8, update to V5.0.8 or later. For versions prior to V5.1.5, update to V5.1.5 or later. For versions prior to V5.2.1, update to V5.2.1 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-40357

Affected Products

Teamcenter Active Workspace

References · 4

• https://cert-portal.siemens.com/productcert/pdf/ssa-413407.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-40357 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-40357 · Security Note
• https://t.me/cibsecurity/28786 · Telegram Post