Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2021-29101

ArcGIS GeoEvent Server has a Directory Traversal security vulnerability.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Esri

Description

ArcGIS GeoEvent Server versions 10.8.1 and below has a read-only directory path traversal vulnerability that could allow an unauthenticated, remote attacker to perform directory traversal attacks and read arbitrary files on the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Esri ArcGIS GeoEvent Server

  • All to ≤ 10.8.1affected

References