Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2021-32937

MDT AutoSave Generation of Error Message Containing Sensitive Information

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

An attacker can gain knowledge of a session temporary working folder where the getfile and putfile commands are used in MDT AutoSave versions prior to v6.02.06. An attacker can leverage this knowledge to provide a malicious command to the working directory where the read and write activity can be initiated.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MDT Software MDT AutoSave

  • unspecified to < 6.02.06affected

MDT Software MDT AutoSave

  • 7.00 to < 7.04affected

MDT Software AutoSave for System Platform (A4SP)

  • unspecified to < 4.01affected

MDT Software A4SP

  • 5.00affected

References