CVE-2023-34126
Assigner: sonicwall
Published: 2023-07-13T00:44:10.845Z
State: PUBLISHED
affected: defaultStatus: unknown
product: GMS
vendor: SonicWall
versions: status: affected
version: 9.3.2-SP1 and earlier versions
defaultStatus: unknown
product: Analytics
vendor: SonicWall
versions: status: affected
version: 2.5.0.4-R7 and earlier versions
datePublic: 2023-07-13T00:42:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
value: Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
problemTypes: descriptions: cweId: CWE-434
description: CWE-434 Unrestricted Upload of File with Dangerous Type
type: CWE
source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.1.0-dev