It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDaServlet has directory traversal vulnerabilities at the \/api/appInternals/1.0/agent/da/pcf\ API. The affected endpoint does not have any validation of the user's input that allows a malicious payload to be injected.