Vulnerabilities > CVE-2021-32017 - Unspecified vulnerability in Jump-Technology Asset Management 3.6.0.04.0092487

047910
CVSS 7.7 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
jump-technology

Summary

An issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the listing of the content of the remote file system. This can be used to identify the complete server filesystem structure, i.e., identifying all the directories and files.

Vulnerable Configurations

Part Description Count
Application
Jump-Technology
1