{"id":77,"created_when":"2019-12-17T21:00:00Z","created_by":"arun","updated_when":"2020-03-06T04:42:49Z","updated_by":"arun","advisory_id":"SNWLID-2019-0018","title":"SonicWall SMA100 Pre-authentication directory traversal","published_when":"2019-12-17T21:00:00Z","last_updated_when":"2020-03-06T04:42:49Z","impact":"high","cvss":"7.5","cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_version":3.0,"cwe":"CWE-22","cve":"CVE-2019-7483","cpe":"","summary":"In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.","is_workaround_available":false,"workaround":"","detail":"SonicWall SMA1000 appliances are not affected by this vulnerability.","affected_products":"SonicWall SMA100 9.0.0.3 and earlier","fixed_software":"SonicWall SMA100 9.0.0.4","credits":"Alain Mowat","revision_history":"
\r\n
Version
1.0
Date
17-Dec-2019
Description
Initial Release.
----------------------------------------
Version
1.1
Date
06-Mar-2020
Description
Added \"SonicWall SMA1000 appliances are not affected by this vulnerability\" in the comments section.
","references":"","vuln_status":"Applicable","status":"published","is_published":true,"patterns":[],"vulnerable_products":[{"id":4,"name":"Secure Mobile Access (SMA) 100 Series"}]}