CVE-2021-40354

{"containers": {"cna": {"affected": [{"product": "Teamcenter V12.4", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V12.4.0.8"}]}, {"product": "Teamcenter V13.0", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V13.0.0.7"}]}, {"product": "Teamcenter V13.1", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V13.1.0.5"}]}, {"product": "Teamcenter V13.2", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < 13.2.0.2"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions < V13.1.0.5), Teamcenter V13.2 (All versions < 13.2.0.2). The \"surrogate\" functionality on the user profile of the application does not perform sufficient access control that could lead to an account takeover. Any profile on the application can perform this attack and access any other user assigned tasks via the \"inbox/surrogate tasks\"."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-267", "description": "CWE-267: Privilege Defined With Unsafe Actions", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-09-14T10:47:58.000Z", "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-987403.pdf"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "productcert@siemens.com", "ID": "CVE-2021-40354", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Teamcenter V12.4", "version": {"version_data": [{"version_value": "All versions < V12.4.0.8"}]}}, {"product_name": "Teamcenter V13.0", "version": {"version_data": [{"version_value": "All versions < V13.0.0.7"}]}}, {"product_name": "Teamcenter V13.1", "version": {"version_data": [{"version_value": "All versions < V13.1.0.5"}]}}, {"product_name": "Teamcenter V13.2", "version": {"version_data": [{"version_value": "All versions < 13.2.0.2"}]}}]}, "vendor_name": "Siemens"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions < V13.1.0.5), Teamcenter V13.2 (All versions < 13.2.0.2). The \"surrogate\" functionality on the user profile of the application does not perform sufficient access control that could lead to an account takeover. Any profile on the application can perform this attack and access any other user assigned tasks via the \"inbox/surrogate tasks\"."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-267: Privilege Defined With Unsafe Actions"}]}]}, "references": {"reference_data": [{"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-987403.pdf", "refsource": "MISC", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-987403.pdf"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T02:44:09.181Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-987403.pdf"}]}]}, "cveMetadata": {"assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "assignerShortName": "siemens", "cveId": "CVE-2021-40354", "datePublished": "2021-09-14T10:47:58.000Z", "dateReserved": "2021-09-01T00:00:00.000Z", "dateUpdated": "2024-08-04T02:44:09.181Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "Teamcenter V12.4", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V12.4.0.8"}]}, {"product": "Teamcenter V13.0", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V13.0.0.7"}]}, {"product": "Teamcenter V13.1", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V13.1.0.5"}]}, {"product": "Teamcenter V13.2", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < 13.2.0.2"}]}], "source": "productcert@siemens.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*", "matchCriteriaId": "13870B36-3683-4B71-9322-CE26AB6724D3", "versionEndExcluding": "12.4.0.8", "versionStartIncluding": "12.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*", "matchCriteriaId": "0AE45246-C5C8-42C4-807F-0C6D34C1200B", "versionEndExcluding": "13.0.0.7", "versionStartIncluding": "13.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*", "matchCriteriaId": "A1360B8D-7874-413B-A6F0-6ACEA39236A2", "versionEndExcluding": "13.1.0.5", "versionStartIncluding": "13.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*", "matchCriteriaId": "4339F831-9FD8-4FD3-B874-F88F77B8081B", "versionEndExcluding": "13.2.0.2", "versionStartIncluding": "13.2.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions < V13.1.0.5), Teamcenter V13.2 (All versions < 13.2.0.2). The \"surrogate\" functionality on the user profile of the application does not perform sufficient access control that could lead to an account takeover. Any profile on the application can perform this attack and access any other user assigned tasks via the \"inbox/surrogate tasks\"."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en Teamcenter versi\u00f3n V12.4 (Todas las versiones anteriores a V12.4.0.8), Teamcenter versi\u00f3n V13.0 (Todas las versiones anteriores a V13.0.0.7), Teamcenter versi\u00f3n V13.1 (Todas las versiones anteriores a V13.1.0.5), Teamcenter versi\u00f3n V13.2 (Todas las versiones anteriores a 13.2.0.2). La funcionalidad \"surrogate\" en el perfil de usuario de la aplicaci\u00f3n no lleva acabo un control de acceso suficiente que podr\u00eda conllevar a una toma de posesi\u00f3n de la cuenta. Cualquier perfil de la aplicaci\u00f3n puede llevar a cabo este ataque y acceder a cualquier otra tarea asignada por el usuario por medio de \"inbox/surrogate tasks\""}], "id": "CVE-2021-40354", "lastModified": "2026-06-17T04:06:47.063", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 5.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 4.2, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-09-14T11:15:26.667", "references": [{"source": "productcert@siemens.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-987403.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-987403.pdf"}], "sourceIdentifier": "productcert@siemens.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-267"}], "source": "productcert@siemens.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-269"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}