CVE-2021-32016

An issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the writing of arbitrary files to a user-controlled location on the remote filesystem (with user-controlled content) via directory traversal, potentially leading to remote code and command execution.

Score

CVSS 3.1 9.9 Critical

Status

Modified - cve@mitre.org

Published

2021-08-03

Last modified

2025-05-30

Weaknesses

CWE-22

Affected products

• Asset Management (Jump-technology)

References

• https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-32016
• https://excellium-services.com/cert-xlm-advisory/cve-2021-32016/