high7.2
CVE-2021-26725
Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticated administrator to read-protected syst…
Impact
Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticated administrator to read-protected system files. This issue affects: Nozomi Networks Guardian 20.0.7.3 version 20.0.7.3 and prior versions. Nozomi Networks CMC 20.0.7.3 version 20.0.7.3 and prior versions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nozominetworks | Central Management Control | from 19.0.0 through 19.0.12 from 20.0.0.0 before 20.0.7.4 |
| Nozominetworks | Guardian | from 19.0.0 before 19.0.12 from 20.0.0.0 before 20.0.7.4 |