Description
It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDaServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/da/pcf" API. The affected endpoint does not have any validation of the user's input that allows a malicious payload to be injected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Aternity | SteelCentral AppInternals Dynamic Sampling Agent | 10.x, 12.13.0 – < 12.13.0, 11.8.8 – < 11.8.8 | 12.13.0 |