medium6.5
CVE-2021-32093
The ConfigFileAction component of U.S.
Impact
The ConfigFileAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to read arbitrary files via the ConfigName parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nsa | Emissary | Version 5.9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed
- https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover
- https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed
- https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover