CVE-2023-34125 - AskarLabs CVE Database

CVE-2023-34125

Vendor Sonicwall

Product GMS

Weakness CWE-27

Published July 13, 2023

Last update November 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Key dates

02Disclosure timeline

July 13, 2023 CVE published

November 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-34125 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/27.html

Identifiers

CVE CVE-2023-34125

CWE CWE-27

Affected versions

Vendor Sonicwall

Product GMS

Affected 9.3.2-SP1 and earlier versions

Vendor Sonicwall

Product Analytics

Affected 2.5.0.4-R7 and earlier versions