CVE-2021-32937

Name of the Vulnerable Software and Affected Versions MDT AutoSave versions prior to v6.02.06

Description An issue exists where an attacker can gain knowledge of a session's temporary working folder when the getfile and putfile commands are used. This knowledge can be leveraged to provide a malicious command to the working directory, allowing read and write activity to be initiated.

Recommendations For versions prior to v6.02.06, update to version v6.02.06 or later to resolve the issue. As a temporary workaround, consider restricting access to the temporary working folder to minimize the risk of exploitation.