CVE-2021-42797: Path Traversal
First published: Sat Dec 16 2023(Updated: )
Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthenticated user to steal the Windows access token of the user account configured for accessing external DB resources.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| AVEVA Edge | <2020 | |
| AVEVA Edge | =2020 | |
| AVEVA Edge | =2020-r2 | |
| AVEVA Edge | =2020-r2 | |
| AVEVA Edge 2020 R2 SP1 | ||
| AVEVA Edge 2020 R2 SP1 w/ HF 2020.2.00.40 | ||
| AVEVA Edge 2020 R2 and all prior versions (formerly known as InduSoft Web Studio) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-api
- agent/references
- agent/type
- agent/first-publish-date
- agent/author
- agent/severity
- agent/description
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/event
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/trending
- agent/tags
- agent/source
- vendor/aveva
- canonical/aveva edge
- version/aveva edge/2020
- version/aveva edge/2020-r2
- canonical/aveva edge 2020 r2 sp1
- canonical/aveva edge 2020 r2 sp1 w/ hf 2020.2.00.40
- canonical/aveva edge 2020 r2 and all prior versions (formerly known as indusoft web studio)