Unscored CVE-2023-34125 EUVD-2023-38227GHSA-8c32-84r5-7x4m

Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem w…

Published Jul 13, 2023 · Updated Nov 5, 2024 · Assigned by sonicwall

Vendor: SonicWall Product: Analytics Product: GMS Category: Network devices

Description

Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Affected products

Vendor	Product	Affected	Fixed
SonicWall	GMS	9.3.2-SP1 and earlier versions	—
SonicWall	Analytics	2.5.0.4-R7 and earlier versions	—

Advisories 1

WID-SEC-2023-1736 SonicWall GMS und SonicWall Analytics: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 12, 2023

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 vendor-advisory
https://www.sonicwall.com/support/notices/230710150218060 related