Description
An improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in SonicWall Email Security Appliance could allow a remote attacker with administrative privileges to conduct a directory traversal attack and delete arbitrary files from the appliance file system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SonicWall | Email Security | 10.0.26.7807 and earlier versions | — |
Advisories 1
- WID-SEC-2024-0604 SonicWall Email Security: Schwachstelle ermöglicht Manipulation von Dateien BSI CERT-Bund (WID) · Mar 12, 2024
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0006 vendor-advisory