Unrated severityNVD Advisory· Published Jul 13, 2023· Updated Oct 30, 2024
CVE-2023-34129
CVE-2023-34129
Description
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the directory and extract arbitrary files using Zip Slip method to any location on the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Affected products
2- SonicWall/Analyticsv5Range: 2.5.0.4-R7 and earlier versions
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010mitrevendor-advisory
- www.sonicwall.com/support/notices/230710150218060mitrerelated
News mentions
0No linked articles in our index yet.