CVE-2023-34125 - Vulnerability Details - OpenCVE

Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Sonicwall	Analytics Global Management System

Configuration 1 [-]

OR	cpe:2.3:a:sonicwall:analytics::::::::
	cpe:2.3:a:sonicwall:global_management_system::::::::
	cpe:2.3:a:sonicwall:global_management_system:9.3.2:-::::::
	cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1::::::

No data.

References

Link	Providers
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010
https://www.sonicwall.com/support/notices/230710150218060

History

Tue, 05 Nov 2024 16:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: sonicwall

Published: 2023-07-13T00:21:21.095Z

Updated: 2024-11-05T15:34:52.319Z

Reserved: 2023-05-25T22:45:46.851Z

Link: CVE-2023-34125

Vulnrichment

Updated: 2024-08-02T16:01:54.052Z

NVD

Status : Modified

Published: 2023-07-13T01:15:08.783

Modified: 2024-11-21T08:06:35.997

Link: CVE-2023-34125

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-34125", "assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "state": "PUBLISHED", "assignerShortName": "sonicwall", "dateReserved": "2023-05-25T22:45:46.851Z", "datePublished": "2023-07-13T00:21:21.095Z", "dateUpdated": "2024-11-05T15:34:52.319Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "product": "GMS", "vendor": "SonicWall", "versions": [{"status": "affected", "version": "9.3.2-SP1 and earlier versions"}]}, {"defaultStatus": "unknown", "product": "Analytics", "vendor": "SonicWall", "versions": [{"status": "affected", "version": "2.5.0.4-R7 and earlier versions"}]}], "datePublic": "2023-07-13T00:19:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.<p></p>"}], "value": "Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.\n\n"}], "problemTypes": [{"descriptions": [{"cweId": "CWE-27", "description": "CWE-27 Path Traversal: 'dir/../../filename'", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "shortName": "sonicwall", "dateUpdated": "2023-07-13T00:21:21.095Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010"}, {"tags": ["related"], "url": "https://www.sonicwall.com/support/notices/230710150218060"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T16:01:54.052Z"}, "title": "CVE Program Container", "references": [{"tags": ["vendor-advisory", "x_transferred"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010"}, {"tags": ["related", "x_transferred"], "url": "https://www.sonicwall.com/support/notices/230710150218060"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-05T15:34:38.926559Z", "id": "CVE-2023-34125", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-05T15:34:52.319Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010", "tags": ["vendor-advisory", "x_transferred"]}, {"url": "https://www.sonicwall.com/support/notices/230710150218060", "tags": ["related", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T16:01:54.052Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-34125", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-05T15:34:38.926559Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-05T15:34:48.150Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "SonicWall", "product": "GMS", "versions": [{"status": "affected", "version": "9.3.2-SP1 and earlier versions"}], "defaultStatus": "unknown"}, {"vendor": "SonicWall", "product": "Analytics", "versions": [{"status": "affected", "version": "2.5.0.4-R7 and earlier versions"}], "defaultStatus": "unknown"}], "datePublic": "2023-07-13T00:19:00.000Z", "references": [{"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010", "tags": ["vendor-advisory"]}, {"url": "https://www.sonicwall.com/support/notices/230710150218060", "tags": ["related"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.\n\n", "supportingMedia": [{"type": "text/html", "value": "Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.<p></p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-27", "description": "CWE-27 Path Traversal: 'dir/../../filename'"}]}], "providerMetadata": {"orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "shortName": "sonicwall", "dateUpdated": "2023-07-13T00:21:21.095Z"}}}, "cveMetadata": {"cveId": "CVE-2023-34125", "state": "PUBLISHED", "dateUpdated": "2024-11-05T15:34:52.319Z", "dateReserved": "2023-05-25T22:45:46.851Z", "assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "datePublished": "2023-07-13T00:21:21.095Z", "assignerShortName": "sonicwall"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sonicwall:analytics:*:*:*:*:*:*:*:*", "matchCriteriaId": "A5BFA6B7-2070-4FCA-B27C-5ED1047B1101", "versionEndIncluding": "2.5.0.4-r7", "vulnerable": true}, {"criteria": "cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "02CDB54F-B795-42B3-A406-22D7E4A03ACB", "versionEndExcluding": "9.3.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:*:*:*:*", "matchCriteriaId": "2E8493ED-1A01-4FAA-9608-4481DDD0D69B", "vulnerable": true}, {"criteria": "cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:*:*:*:*", "matchCriteriaId": "89A96771-621F-4D0D-B667-0A99F5F76789", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.\n\n"}], "id": "CVE-2023-34125", "lastModified": "2024-11-21T08:06:35.997", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-07-13T01:15:08.783", "references": [{"source": "PSIRT@sonicwall.com", "tags": ["Vendor Advisory"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010"}, {"source": "PSIRT@sonicwall.com", "tags": ["Vendor Advisory"], "url": "https://www.sonicwall.com/support/notices/230710150218060"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.sonicwall.com/support/notices/230710150218060"}], "sourceIdentifier": "PSIRT@sonicwall.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-27"}], "source": "PSIRT@sonicwall.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-22"}], "source": "nvd@nist.gov", "type": "Primary"}]}