← Back

CVE-2021-40355

nvd nist
Published: Sep 14, 2021Modified: Nov 21, 2024

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions < V13.1.0.5), Teamcenter V13.2 (All versions < 13.2.0.2). The affected application contains Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to use user-supplied input to access objects directly.

Affected (4)

Siemens
1 product
Teamcenter Visualization
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Siemens
Teamcenter Visualization
From 12.4.0 to 12.4.0.8
Teamcenter Visualization
From 13.0.0 to 13.0.0.7
Teamcenter Visualization
From 13.1.0 to 13.1.0.5
Teamcenter Visualization
From 13.2.0 to 13.2.0.2

Related CWEs

CWE-639
Authorization Bypass Through User-Controlled Key
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

References (2)

Source: productcert@siemens.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.