CVE-2021-41551 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	4.9 MEDIUM	NETWORK	LOW	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 43%

Vendor	Product	Version
leostream	connection_broker	9.0.40.17

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-59 - Improper Link Resolution Before File Access ('Link Following')
The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References

https://leostream.com/wp-content/uploads/2018/11/Leostream_release_notes.pdf

https://www.leostream.com/resource/leostream-connection-broker-9-0/

https://leostream.com/wp-content/uploads/2018/11/Leostream_release_notes.pdf

https://www.leostream.com/resource/leostream-connection-broker-9-0/