CVE-2021-40680: Path Traversal

Published Apr 25, 2022

Updated

There is a Directory Traversal vulnerability in Artica Proxy (4.30.000000 SP206 through SP255, and VMware appliance 4.30.000000 through SP273) via the filename parameter to /cgi-bin/main.cgi.

Affected Software

9 affected components

Articatech Web Proxy=4.30.000000-sp206

Articatech Web Proxy=4.30.000000-sp255

Articatech Web Proxy Vmware=4.30.000000-sp267

Articatech Web Proxy Vmware=4.30.000000-sp268

Articatech Web Proxy Vmware=4.30.000000-sp269

Articatech Web Proxy Vmware=4.30.000000-sp270

Articatech Web Proxy Vmware=4.30.000000-sp271

Articatech Web Proxy Vmware=4.30.000000-sp272

Articatech Web Proxy Vmware=4.30.000000-sp273

Event History

Apr 25, 2022

CVE Published

via MITRE·04:12 AM

Data Sourced

via MITRE·04:12 AM

DescriptionSeverity

Frequently Asked Questions

What is the severity of CVE-2021-40680?

CVE-2021-40680 has been rated as a high severity vulnerability due to the potential for unauthorized access to sensitive files.

How do I fix CVE-2021-40680?

To fix CVE-2021-40680, upgrade to the latest version of Artica Proxy that addresses this vulnerability.

What systems are affected by CVE-2021-40680?

CVE-2021-40680 affects Artica Proxy versions 4.30.000000 SP206 through SP255, as well as VMware appliance versions 4.30.000000 through SP273.

What type of vulnerability is CVE-2021-40680?

CVE-2021-40680 is a Directory Traversal vulnerability, allowing attackers to access restricted directories and files.

Can CVE-2021-40680 be exploited remotely?

Yes, CVE-2021-40680 can be exploited remotely if the affected systems are accessible over the network.