PT-2021-20835
CVE-2021-35203
·
Published
2021-09-30
·
Updated
2021-10-04
Description by
CVSS 3.1
5.7
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
NETSCOUT Systems nGeniusONE version 6.3.0 build 1196
Description:
The issue allows for Arbitrary File Read operations. This is achieved via the "FDSQueryService" endpoint.
Recommendations:
For NETSCOUT Systems nGeniusONE version 6.3.0 build 1196, consider restricting access to the "FDSQueryService" endpoint until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾