CVE-2021-29101 — ArcGIS GeoEvent Server has a Directory Traversal security vulnerability.

CVE-2021-29101

ArcGIS GeoEvent Server has a Directory Traversal security vulnerability. PUBLISHED

Description (CNA)

ArcGIS GeoEvent Server versions 10.8.1 and below has a read-only directory path traversal vulnerability that could allow an unauthenticated, remote attacker to perform directory traversal attacks and read arbitrary files on the system.

Affected (CNA)

Vendor / product	Versions
Esri / ArcGIS GeoEvent Server	affected All through 10.8.1

CWE

CWE-23

References

https://www.esri.com/arcgis-blog/products/ext-server-geoevent/administration/arcgis-geoevent-server-security-update-2021-patch-1

ADP enrichment

CVE

No English description supplied.

https://www.esri.com/arcgis-blog/products/ext-server-geoevent/administration/arcgis-geoevent-server-security-update-2021-patch-1

CISA-ADP

No English description supplied.

No references supplied.