CVE-2021-37442: Path Traversal
Published Jul 25, 2021
·Updated
NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files.
Affected Software
1 affected component
Nchsoftware Ivm Attendant<=5.12
Event History
Jul 25, 2021
CVE Published
via MITRE·08:14 PM
Data Sourced
via MITRE·08:14 PM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-37442.
2
What is the severity of CVE-2021-37442?
The severity of CVE-2021-37442 is medium.
3
How does CVE-2021-37442 impact NCH IVM Attendant?
CVE-2021-37442 allows path traversal via viewfile?file=/.. to read files in NCH IVM Attendant v5.12 and earlier.
4
How can I check if my version of NCH IVM Attendant is affected by CVE-2021-37442?
If you are using NCH IVM Attendant version 5.12 or earlier, your software may be affected by CVE-2021-37442.
5
How can I fix CVE-2021-37442?
To fix CVE-2021-37442, it is recommended to update NCH IVM Attendant to a version higher than 5.12.