Security Advisory

CVE-2021-40095

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-12-07 12:54:16

Last updated 2024-08-04 02:27:31

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in SquaredUp for SCOM 5.2.1.6654. The Download Log feature in System / Maintenance was susceptible to a local file inclusion vulnerability (when processing remote input in the log files downloaded by an authenticated administrator user), leading to the ability to read arbitrary files on the server filesystems.

← Browse all CVEs View on cve.org ↗