CVE-2021-40095

An issue was discovered in SquaredUp for SCOM 5.2.1.6654

published December 7, 2021

CVSS
—
EPSS
1%
Percentile
62.9
In the wild
Unconfirmed
What it is

An issue was discovered in SquaredUp for SCOM 5.2.1.6654. The Download Log feature in System / Maintenance was susceptible to a local file inclusion vulnerability (when processing remote input in the log files downloaded by an authenticated administrator user), leading to the ability to read arbitrary files on the server filesystems.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01014 · 62.9th percentile
Published
2021-12-07T12:54Z
EPSS history
Timeline
  • 07 DEC 12:54Z
    An issue was discovered in SquaredUp for SCOM 5.2.1.6654
    cvelistv5