CVE-2021-29115

Name of the Vulnerable Software and Affected Versions Esri ArcGIS Enterprise versions 10.9.0 and below

Description An information disclosure issue in the ArcGIS Service Directory may allow a remote attacker to view hidden field names in feature layers, potentially revealing field names but not the features themselves.

Recommendations For versions 10.9.0 and below, update to a version above 10.9.0 to resolve the issue. As a temporary workaround, consider restricting access to the ArcGIS Service Directory to minimize the risk of exploitation.