CVE-2021-32018

Name of the Vulnerable Software and Affected Versions: JUMP AMS version 3.6.0.04.009-2487

Description: An issue was discovered in the JUMP SOAP API, which is vulnerable to arbitrary file reading due to an improper limitation of file loading on the server filesystem, also known as directory traversal.

Recommendations: For JUMP AMS version 3.6.0.04.009-2487, consider restricting access to the JUMP SOAP API until a patch is available. As a temporary workaround, limit the file loading on the server filesystem to prevent directory traversal. At the moment, there is no information about a newer version that contains a fix for this vulnerability.