CVE-2023-34135 - AskarLabs CVE Database

CVE-2023-34135

Vendor Sonicwall

Product GMS

Weakness CWE-36

Published July 13, 2023

Last update October 30, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlying file system via web service. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Key dates

02Disclosure timeline

July 13, 2023 CVE published

October 30, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-34135 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/36.html

Identifiers

CVE CVE-2023-34135

CWE CWE-36

Affected versions

Vendor Sonicwall

Product GMS

Affected 9.3.2-SP1 and earlier versions

Vendor Sonicwall

Product Analytics

Affected 2.5.0.4-R7 and earlier versions