CVE-2023-34135

Description

Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlying file system via web service. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Reserved 2023-05-25 | Published 2023-07-13 | Updated 2024-10-30 | Assigner sonicwall

Problem types

CWE-36 Absolute Path Traversal

Product status

Default status
unknown

9.3.2-SP1 and earlier versions
affected

Default status
unknown

2.5.0.4-R7 and earlier versions
affected

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 vendor-advisory

www.sonicwall.com/support/notices/230710150218060 related

cve.org (CVE-2023-34135)

nvd.nist.gov (CVE-2023-34135)

Download JSON