Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2021-32949

MDT AutoSave Relative Path Traversal

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

An attacker could utilize a function in MDT AutoSave versions prior to v6.02.06 that permits changing a designated path to another path and traversing the directory, allowing the replacement of an existing file with a malicious file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MDT Software MDT AutoSave

  • unspecified to < 6.02.06affected

MDT Software MDT AutoSave

  • 7.00 to < 7.04affected

MDT Software AutoSave for System Platform (A4SP)

  • unspecified to < 4.01affected

MDT Software A4SP

  • 5.00affected

References