Description (CNA)
A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Genians, Inc / Genian NAC 4.0.175 Release | affected 0 before 148817 |
| Genians, Inc / Genian NAC 5.0.65 LTS Release | affected 0 before 148816 |
| Genians, Inc / Genian NAC 5.0.75 LTS Release | affected 0 before 148815 |
| Genians, Inc / Genian NAC 5.0.85 Release Stable | affected 0 before 148814 |
| Genians, Inc / Genian NAC 5.0.86 Release | affected 0 before 148813 |
| Genians, Inc / Genian ZTNA 6.0.26 LTS Release | affected 0 before 148811 |
| Genians, Inc / Genian ZTNA 6.0.35 LTS Release | affected 0 before 148810 |
| Genians, Inc / Genian ZTNA 6.0.45 Release Stable | affected 0 before 148809 |
| Genians, Inc / Genian ZTNA 6.0.46 Release | affected 0 before 148807 |
CWE
CWE-862, CWE-807, CWE-22
References
- https://docs.genians.com/release/ko/advisories/GN-SA-2026-001.html
- https://github.com/genians/security-research/security/advisories/GHSA-c883-w46g-6mg5
ADP enrichment
No English description supplied.
No references supplied.