← Back

CVE-2021-33709

nvd nist
Published: Jul 13, 2021Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Workspace V5.0 (All versions < V5.0.7), Teamcenter Active Workspace V5.1 (All versions < V5.1.4). By sending malformed requests, a remote attacker could leak an application token due to an error not properly handled by the system.

Affected (3)

Siemens
1 product
Teamcenter Active Workspace
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Siemens
Teamcenter Active Workspace
From 4.0.0 to 4.3.9
Teamcenter Active Workspace
From 5.0.0 to 5.0.7
Teamcenter Active Workspace
From 5.1.0 to 5.1.4

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: productcert@siemens.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.