CVE-2021-38417 — VISAM VBASE Editor Improper Access Control

CVE-2021-38417

VISAM VBASE Editor Improper Access Control PUBLISHED

Description (CNA)

VISAM VBASE version 11.6.0.6 is vulnerable to improper access control via the web-remote endpoint, which may allow an unauthenticated user viewing access to folders and files in the directory listing.

Affected (CNA)

Vendor / product	Versions
VISAM / VBASE Pro-RT/ Server-RT (Web Remote)	affected version 11.6.0.6

CWE

No CWE identifiers supplied.

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-308-01

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-21-308-01

CISA-ADP

No English description supplied.

No references supplied.