CVE-2021-29006: Path Traversal
Published Oct 11, 2021
·Updated
rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may successfully download any file on the server.
Affected Software
1 affected component
rConfig rConfig=3.9.6
Event History
Oct 11, 2021
CVE Published
via MITRE·12:02 PM
Data Sourced
via MITRE·12:02 PM
Description
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-29006?
CVE-2021-29006 is a Local File Disclosure vulnerability in rConfig 3.9.6 which allows authenticated users to download any file on the server.
2
How does CVE-2021-29006 impact rConfig?
CVE-2021-29006 allows authenticated users to successfully download any file on the server.
3
What is the severity of CVE-2021-29006?
CVE-2021-29006 has a severity rating of 6.5 (medium).
4
How can I fix CVE-2021-29006?
To fix CVE-2021-29006, it is recommended to upgrade to a patched version of rConfig.
5
Where can I find more information about CVE-2021-29006?
You can find more information about CVE-2021-29006 at the official rConfig website (http://rconfig.com).