Description
A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Genians | Genian NAC 4.0.175 Release | < 148817 | 148817 |
| Genians | Genian NAC 5.0.65 LTS Release | < 148816 | 148816 |
| Genians | Genian NAC 5.0.75 LTS Release | < 148815 | 148815 |
| Genians | Genian NAC 5.0.85 Release Stable | < 148814 | 148814 |
| Genians | Genian NAC 5.0.86 Release | < 148813 | 148813 |
| Genians | Genian ZTNA 6.0.26 LTS Release | < 148811 | 148811 |
| Genians | Genian ZTNA 6.0.35 LTS Release | < 148810 | 148810 |
| Genians | Genian ZTNA 6.0.45 Release Stable | < 148809 | 148809 |
| Genians | Genian ZTNA 6.0.46 Release | < 148807 | 148807 |