CVE-2021-46902: Path Traversal
An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04.008 MBGID-6303. Path validation is mishandled, and thus an admin can read or delete files in violation of expected access controls.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-46902?
CVE-2021-46902 is considered a medium severity vulnerability due to improper path validation allowing unauthorized file access.
How do I fix CVE-2021-46902?
To fix CVE-2021-46902, you should upgrade to Meinberg LANTIME Firmware version 6.24.029 or 7.04.008 or later.
What systems are affected by CVE-2021-46902?
CVE-2021-46902 affects Meinberg LANTIME Firmware versions prior to 6.24.029 and versions from 7.0.0 up to, but not including, 7.04.008.
What is the nature of the vulnerability in CVE-2021-46902?
CVE-2021-46902 involves mishandled path validation that enables an admin to read or delete files without proper access controls.
Who should be concerned about CVE-2021-46902?
Administrators using affected versions of Meinberg LANTIME Firmware should be concerned about CVE-2021-46902 due to the potential unauthorized file access.