CVE-2021-33178

Description

The Manage Backgrounds functionality within NagVis versions prior to 1.9.29 is vulnerable to an authenticated path traversal vulnerability. Exploitation of this results in a malicious actor having the ability to arbitrarily delete files on the local system.

Weakness classification

• disclosure@synopsys.com: CWE-22
• nvd@nist.gov: CWE-22

Primary references

• disclosure@synopsys.com — Release Notes, Vendor Advisory
• disclosure@synopsys.com — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108
• af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory