CVE-2021-41569 Path traversal in n/a
Local File Inclusion in SAS/Intrnet allows attackers to read arbitrary files from the host OS via manipulated macro variables in the samples library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-41569?
CVE-2021-41569 is a high-severity path traversal vulnerability in n/a, published on 19 Nov 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library (included by default) in the appstart.sas file, allows end-users of the application to access the sample.webcsf1.sas program, which contains user-controlled macro variables that are passed to the DS2CSF macro. Users can escape the context of the configured user-controllable variable and append additional functions native to the macro but not included as variables within the library. This includes a function that retrieves files from the host OS.
Weakness: CWE-829
Which versions are affected by CVE-2021-41569?
It affects 1 product.
Products include Sas Sas\/Intrnet.
How do I fix CVE-2021-41569?
No fix has been published for CVE-2021-41569 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2021-41569 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2021-41569 exists.
Public exploit code: 1 Nuclei template.
Sources
Also known as GHSA-6xqv-9mpx-wxjp.