CVE-2021-20023

🗓️ 20 Apr 2021 11:55:13Reported by sonicwallType

SonicWall Email Security version 10.0.9.x vulnerability allowing remote file rea

Reporter	Title	Published	Views	Family All 24
ATTACKERKB	CVE-2021-20023	20 Apr 202100:00	–	attackerkb
BDU FSTEC	The vulnerability of SonicWall Email Security’s email security software lies in the improper restriction of the path to the restricted directory. This allows attackers to gain unauthorized access to the protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The software for email security, SonicWall Email Security and SonicWall Hosted Email Security, has a vulnerability related to incorrect path restrictions for access to restricted directories. This allows attackers to read arbitrary files.	20 Dec 202100:00	–	bdu_fstec
Circl	CVE-2021-20023	21 Apr 202101:32	–	circl
CISA KEV Catalog	SonicWall Email Security Path Traversal Vulnerability	3 Nov 202100:00	–	cisa_kev
CISA	SonicWall Releases Patches for Email Security Products	21 Apr 202100:00	–	cisa
CNNVD	Sonicwall On-premise Email 路径遍历漏洞	20 Apr 202100:00	–	cnnvd
CNVD	Sonicwall On-premise Email Path Traversal Vulnerability	22 Apr 202100:00	–	cnvd
Check Point Advisories	SonicWall Email Security Directory Traversal (CVE-2021-20023)	16 Jan 202200:00	–	checkpoint_advisories
CVE	CVE-2021-20023	20 Apr 202111:55	–	cve

[
  {
    "product": "Email Security",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.9 and earlier"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0010

20 Apr 2021 11:55Current

5.7Medium risk

Vulners AI Score5.7

EPSS0.51407

CWE-22