CVE-2021-40357

State: Published
Severity: Not scored
Published: Sep 14, 2021
Updated: Aug 4, 2024
Reserved: Sep 1, 2021

Description

A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions < V4.3.10), Teamcenter Active Workspace V5.0 (All versions < V5.0.8), Teamcenter Active Workspace V5.1 (All versions < V5.1.5), Teamcenter Active Workspace V5.2 (All versions < V5.2.1). A path traversal vulnerability in the application could allow an attacker to bypass certain restrictions such as direct access to other services within the host.

Scores

The record has no CVSS score.

Weaknesses

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected Products

Product	Versions
Teamcenter Active Workspace V4.3Siemens	All versions < V4.3.10Affected
Teamcenter Active Workspace V5.0Siemens	All versions < V5.0.8Affected
Teamcenter Active Workspace V5.1Siemens	All versions < V5.1.5Affected
Teamcenter Active Workspace V5.2Siemens	All versions < V5.2.1Affected

References

https://cert-portal.siemens.com/productcert/pdf/ssa-413407.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.