| Bug Number | BUG-000139249 |
| Submitted | Apr 21, 2021 |
| Modified | Sep 24, 2021 |
| Severity | High |
| Applies To | ArcGIS Enterprise |
| Version Found | No Version Found |
| Prog Language | N/A |
| Server Platform | N/A N/A |
| Client Platform | N/A N/A |
| Database | N/A |
| Locale | N/A |
| Status | Implemented |
| Version Fixed | N/A |
| SP Fixed | N/A |
Bug BUG-000139249
Synopsis
There is a directory traversal security vulnerability in ArcGIS GeoEvent Server.
Additional Information
The issue is addressed with the release of the ArcGIS GeoEvent Server Security Update 2021 Patch: https://support.esri.com/en/download/7895
Alternate Solution
The fix for this vulnerability is available for ArcGIS GeoEvent Server 10.6.1, 10.7.1, and 10.8.1 as part of the 'ArcGIS GeoEvent Server Security 2021 Update 1' patch.