CVE-2021-26725 Authenticated command path traversal on timezone settings in Guardian/CMC before 20.0.7.4

Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticated administrator to read-protected system files. This issue affects: Nozomi Networks Guardian 20.0.7.3 version 20.0.7.3 and prior versions. Nozomi Networks CMC 20.0.7.3 version...

CVE-2021-26725

Summary of CVE-2021-26725 (Nozomi Networks Guardian/CMC): A path traversal vulnerability exists in the web GUI timezone setting that, when accessed by an authenticated administrator, can read protected system files. Affected: Nozomi Networks Guardian and CMC up to version 20.0.7.3. Root cause det...