CVE-2023-34129

Description

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the directory and extract arbitrary files using Zip Slip method to any location on the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Reserved 2023-05-25 | Published 2023-07-13 | Updated 2024-10-30 | Assigner sonicwall

Problem types

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Product status

Default status
unknown

9.3.2-SP1 and earlier versions
affected

Default status
unknown

2.5.0.4-R7 and earlier versions
affected

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 vendor-advisory

www.sonicwall.com/support/notices/230710150218060 related

cve.org (CVE-2023-34129)

nvd.nist.gov (CVE-2023-34129)

Download JSON