CVE-2021-32017 is a high-severity vulnerability affecting JUMP AMS 3.6.0.04.009-2487, allowing an authenticated attacker to list the remote file system content via a SOAP endpoint. This enables the discovery of the complete server filesystem structure, including directories and files. With a CVSS score of 7.7 (High), the vulnerability is network-exploitable with low attack complexity and no user interaction, leading to high confidentiality impact. While there is no evidence of active exploitation or publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.6.0.04.009-2487CPE matchmatch criteria | cpe:2.3:a:jump-technology:asset_management:3.6.0.04.009-2487:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.