CVE-2021-33711 Information disclosure in Teamcenter Active Workspace V4
An attacker can obtain sensitive information, such as full file paths, via verbose error messages in Teamcenter Active Workspace.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-33711?
CVE-2021-33711 is a medium-severity vulnerability in Siemens Teamcenter Active Workspace V4, published on 13 Jul 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Workspace V5.0 (All versions < V5.0.7), Teamcenter Active Workspace V5.1 (All versions < V5.1.4). The affected application allows verbose error messages which allow leaking of sensitive information, such as full paths.
Weakness: CWE-209
Which versions are affected by CVE-2021-33711?
It affects 1 product.
Products include Siemens Teamcenter Active Workspace.
How do I fix CVE-2021-33711?
No fix has been published for CVE-2021-33711 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-33711 being exploited?
There is no known exploitation of CVE-2021-33711 in the wild and no public exploit code.
Other vulnerabilities in Siemens Teamcenter Active Workspace V4
- CVE-2021-41547 Path traversal in Teamcenter Active Workspace V4.3
- CVE-2022-32145 Cross-site scripting in Teamcenter Active Workspace V5.2
- CVE-2021-33710 Cross-site scripting in Teamcenter Active Workspace V4
- CVE-2021-40357 Path traversal in Teamcenter Active Workspace V4.3
- CVE-2021-33709 Information disclosure in Teamcenter Active Workspace V4
Sources
Also known as GHSA-j5jj-cv4x-3rpr.