CVE-2021-40841

A Path Traversal vulnerability for a log file in LiveConfig 2.12.2 allows authenticated attackers to read files on the underlying server.

• CWE-22

• https://www.liveconfig.com/en/changelog/Release Notes, Third Party Advisory
• https://www.mgm-sp.com/en/liveconfig-2-12-2-vulnerabilities/Third Party Advisory
• https://www.liveconfig.com/en/changelog/Release Notes, Third Party Advisory
• https://www.mgm-sp.com/en/liveconfig-2-12-2-vulnerabilities/Third Party Advisory

Published

Feb 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40835An URL Address bar spoofing vulnerability was discovered in …4.3
• CVE-2021-40836A vulnerability affecting F-Secure antivirus engine was disc…5.5
• CVE-2021-40837A vulnerability affecting F-Secure antivirus engine before C…5.3
• CVE-2021-40839The rencode package through 1.0.6 for Python allows an infin…7.5
• CVE-2021-4084pimcore is vulnerable to Improper Neutralization of Input Du…6.1
• CVE-2021-40840A Stored XSS issue exists in the admin/users user administra…5.4
• CVE-2021-40842Proofpoint Insider Threat Management Server contains a SQL i…9.8
• CVE-2021-40843Proofpoint Insider Threat Management Server contains an unsa…7.3
• CVE-2021-40845The web part of Zenitel AlphaCom XE Audio Server through 11.…8.8
• CVE-2021-40846An issue was discovered in Rhinode Trading Paints through 2.…7.5
• CVE-2021-40847The update process of the Circle Parental Control Service on…8.1
• CVE-2021-40848In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exp…7.8