← CVE Intelligence

CVE-2021-26725

Authenticated command path traversal on timezone settings in Guardian/CMC before 20.0.7.4 PUBLISHED

Description (CNA)

Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticated administrator to read-protected system files. This issue affects: Nozomi Networks Guardian 20.0.7.3 version 20.0.7.3 and prior versions. Nozomi Networks CMC 20.0.7.3 version 20.0.7.3 and prior versions.

Affected (CNA)

Vendor / productVersions
Nozomi Networks / Guardianaffected 20.0.7.3 and prior versions
Nozomi Networks / CMCaffected 20.0.7.3 and prior versions

CWE

CWE-24

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.