CVE-2021-29101CWE-23

ArcGIS GeoEvent Server has a Directory Traversal security vulnerability.

High · published May 5, 2021

CVSS v3.0
8.6
EPSS
2%
Percentile
83.1
In the wild
Unconfirmed
What it is

ArcGIS GeoEvent Server versions 10.8.1 and below has a read-only directory path traversal vulnerability that could allow an unauthenticated, remote attacker to perform directory traversal attacks and read arbitrary files on the system.

The record
Technical detail
CVSS v3.0
8.6 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02290 · 83.1th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2021-05-05T18:21Z
EPSS history
Timeline
  • 05 MAY 18:21Z
    ArcGIS GeoEvent Server has a Directory Traversal security vulnerability.
    cvelistv5