VULNERABILITY INTELLIGENCE

CVE-2021-42853

CVSS score9.8 CRITICAL

EPSS probability1.57%

CISA KEVNot currently listed

Published2022-03-10

Last modified2026-06-17

Description

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDiagnosticServlet has directory traversal vulnerability at the "/api/appInternals/1.0/agent/diagnostic/logs" API. The affected endpoint does not have any input validation of the user's input that allows a malicious payload to be injected.