Vulnetix
Try Vulnetix Request Demo
CVE-2021-40354 PUBLISHED CVSS 5.5 MEDIUM

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions < V13.1.0.5), Teamcenter V13.2 (All versions < 13.2.0.2). The "surrogate" functionality on the user profile of the application does not perform sufficient access control that could lead to an account takeover. Any profile on the application can perform this attack and access any other user assigned tasks via the "inbox/surrogate tasks".

EPSS 0.21% · 43.1th percentile

Risk Scores

CVSS v2.0
5.5
EPSS Score
0.21%
43.1th percentile

Affected Products

VendorProductVersions
SiemensTeamcenter V12.4All versions < V12.4.0.8
SiemensTeamcenter V13.2All versions < 13.2.0.2
SiemensTeamcenter V13.0All versions < V13.0.0.7
siemensteamcenter_visualization13.1.0, 13.2.0, 12.4.0
SiemensTeamcenter V13.1All versions < V13.1.0.5

Timeline

References

…and 2 more

Open in Interactive Console →