PT-2021-24024 · Wolters Kluwer · Wolters Kluwer Teammate+

Published 2021-12-17 · Updated 2021-12-22 · CVE-2021-44035

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Wolters Kluwer TeamMate AM version 12.4 Update 1

Description: The issue concerns the mishandling of attachment uploads, allowing an authenticated user to download and execute malicious files.

Recommendations: For version 12.4 Update 1, consider restricting access to attachment uploads to minimize the risk of exploitation until a patch is available.

Fix

Related Identifiers

CVE-2021-44035

Affected Products

Wolters Kluwer Teammate+

References · 7

• https://osv.dev/vulnerability/CVE-2021-44035 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-44035 · Security Note
• https://t.me/cvenotify/24786 · Telegram Post
• https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-44035 · Note
• https://t.me/cibsecurity/34197 · Telegram Post
• https://wolterskluwer.com/en/solutions/teammate · Note
• https://excellium-services.com/cert-xlm-advisory/CVE-2021-44035 · Note