CVE-2021-40680
Artica Proxy VMWare Appliance 4.30.000000 SP273 Path Traversal
Severity Score
8.1
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
There is a Directory Traversal vulnerability in Artica Proxy (4.30.000000 SP206 through SP255, and VMware appliance 4.30.000000 through SP273) via the filename parameter to /cgi-bin/main.cgi.
Se presenta una vulnerabilidad de Salto de Directorio en Artica Proxy (versiones 4.30.000000 SP206 a SP255, y VMware appliance versiones 4.30.000000 a SP273) por medio del parámetro filename al archivo /cgi-bin/main.cgi
Artica Proxy VMWare Appliance versions 4.30.000000 SP273 and below suffer from a path traversal vulnerability.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-09-03 CVE Published
- 2021-09-07 CVE Reserved
- 2024-08-04 CVE Updated
- 2024-10-21 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| http://seclists.org/fulldisclosure/2022/Apr/39 | Mailing List |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Articatech Search vendor "Articatech" | Web Proxy Search vendor "Articatech" for product "Web Proxy" | 4.30.000000 Search vendor "Articatech" for product "Web Proxy" and version "4.30.000000" | sp206 |
Affected
| ||||||
| Articatech Search vendor "Articatech" | Web Proxy Search vendor "Articatech" for product "Web Proxy" | 4.30.000000 Search vendor "Articatech" for product "Web Proxy" and version "4.30.000000" | sp255 |
Affected
| ||||||
| Articatech Search vendor "Articatech" | Web Proxy Search vendor "Articatech" for product "Web Proxy" | 4.30.000000 Search vendor "Articatech" for product "Web Proxy" and version "4.30.000000" | sp267, vmware |
Affected
| ||||||
| Articatech Search vendor "Articatech" | Web Proxy Search vendor "Articatech" for product "Web Proxy" | 4.30.000000 Search vendor "Articatech" for product "Web Proxy" and version "4.30.000000" | sp268, vmware |
Affected
| ||||||
| Articatech Search vendor "Articatech" | Web Proxy Search vendor "Articatech" for product "Web Proxy" | 4.30.000000 Search vendor "Articatech" for product "Web Proxy" and version "4.30.000000" | sp269, vmware |
Affected
| ||||||
| Articatech Search vendor "Articatech" | Web Proxy Search vendor "Articatech" for product "Web Proxy" | 4.30.000000 Search vendor "Articatech" for product "Web Proxy" and version "4.30.000000" | sp270, vmware |
Affected
| ||||||
| Articatech Search vendor "Articatech" | Web Proxy Search vendor "Articatech" for product "Web Proxy" | 4.30.000000 Search vendor "Articatech" for product "Web Proxy" and version "4.30.000000" | sp271, vmware |
Affected
| ||||||
| Articatech Search vendor "Articatech" | Web Proxy Search vendor "Articatech" for product "Web Proxy" | 4.30.000000 Search vendor "Articatech" for product "Web Proxy" and version "4.30.000000" | sp272, vmware |
Affected
| ||||||
| Articatech Search vendor "Articatech" | Web Proxy Search vendor "Articatech" for product "Web Proxy" | 4.30.000000 Search vendor "Articatech" for product "Web Proxy" and version "4.30.000000" | sp273, vmware |
Affected
| ||||||