CVE-2021-32018

An issue was discovered in JUMP AMS 3.6.0.04.009-2487

High · published August 3, 2021

CVSS v3.1
8.5
EPSS
1%
Percentile
67.5
In the wild
Unconfirmed
What it is

An issue was discovered in JUMP AMS 3.6.0.04.009-2487. The JUMP SOAP API was vulnerable to arbitrary file reading due to an improper limitation of file loading on the server filesystem, aka directory traversal.

The record
Technical detail
CVSS v3.1
8.5 · HIGH
Vector
CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:L/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.01181 · 67.5th percentile
Published
2021-08-03T17:57Z
EPSS history
Timeline
  • 03 AUG 17:57Z
    An issue was discovered in JUMP AMS 3.6.0.04.009-2487
    cvelistv5