CVE-2021-36717
Assigner: INCD
Published: 2021-09-07T11:36:33
State: PUBLISHED
affected: product: TimeNet version 
vendor: Synerion 
versions: status: affected
version: TimeNet 9.21
descriptions: value: Synerion TimeNet version 9.21 contains a directory traversal vulnerability where, on the "Name" parameter, the attacker can return to the root directory and open the host file. This might give the attacker the ability to view restricted files, which could provide the attacker with more information required to further compromise the system.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
version: 3.1
problemTypes: descriptions: description: Directory Traversal 
type: text
solutions: value: Update to TimeNet version 10.2.1 
source: advisory: ILVN-2021-0002
defect: ILVN-2021-0002
discovery: EXTERNAL
title: Synerion TimeNet version 9.21 - Directory Traversal
x_generator: engine: Vulnogram 0.0.9