Security readout for executives and security teams
Plain-English summary
This issue affects Wolters Kluwer TeamMate AM 12.4 Update 1 attachment handling. An authenticated user can abuse uploads so another user may download and execute a malicious file. The published severity is medium because exploitation needs valid access, high attack complexity, and user interaction.
Executive priority
Treat as a moderate-risk business application issue. Prioritize inventory and vendor-guided remediation if TeamMate AM supports audit, risk, or compliance workflows, especially where many internal users can upload attachments.
Technical view
CVE-2021-44035 is an authenticated attachment-upload handling flaw in TeamMate AM 12.4 Update 1. CVSS 3.1 is 4.4 with AV:N, PR:L, AC:H, UI:R, S:C, C:L, and I:L. The source bundle does not provide a CWE, exploit details, or a named fixed version.
Likely exposure
Exposure is most likely where TeamMate AM 12.4 Update 1 is deployed and authenticated users can upload or retrieve attachments. Public internet exposure would increase concern, but the sources do not state deployment patterns.
Exploitation context
The bundle does not show CISA KEV listing or confirmed active exploitation. Exploitation requires authenticated access and user interaction, and the public description only states that malicious files may be downloaded and executed.
Researcher notes
Evidence is limited to the CVE description and advisory links. Do not assume a public exploit, broad product impact, or a specific patch from this bundle. The CVSS vector indicates network reachability, low privileges, high complexity, required user interaction, changed scope, and low confidentiality and integrity impact.
Mitigation direction
- Identify any TeamMate AM 12.4 Update 1 deployments.
- Check Wolters Kluwer guidance for fixed versions or supported mitigations.
- Restrict attachment-upload access to trusted users and roles.
- Review attachment controls, file-type handling, and download warnings.
- Monitor TeamMate attachment activity for unusual upload or download patterns.
Validation and detection
- Confirm the installed TeamMate AM version and update level.
- Review who can upload and download attachments.
- Check logs for suspicious attachment names, types, or access patterns.
- Verify vendor guidance before changing production configuration.
- Document whether the affected attachment workflow is enabled.
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2021-44035 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 4.4 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AC:H/AV:N/A:N/C:L/I:L/PR:L/S:C/UI:R
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AC:H/AV:N/A:N/C:L/I:L/PR:L/S:C/UI:R1.32.7Primary CVE scoreVulnerability scoring details
Base CVSS 3.1 score
4.4MediumVector: CVSS:3.1/AC:H/AV:N/A:N/C:L/I:L/PR:L/S:C/UI:R
Source materials
- CVE List V5 sourceCVE List V5
- https://www.wolterskluwer.com/en/solutions/teammateCVE reference
- https://excellium-services.com/cert-xlm-advisory/CVE-2021-44035CVE reference
- https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-44035CVE reference
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.