{"id":118,"created_when":"2021-04-09T22:03:27Z","created_by":"arun","updated_when":"2021-04-09T22:03:27Z","updated_by":"arun","advisory_id":"SNWLID-2021-0008","title":"SonicWall Email Security post-authentication arbitrary file creation vulnerability","published_when":"2021-04-09T22:03:27Z","last_updated_when":"2021-04-09T22:03:27Z","impact":"medium","cvss":"6.7","cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:H","cvss_version":3.0,"cwe":"CWE-434","cve":"CVE-2021-20022","cpe":"","summary":"SonicWall Email Security version 10.0.9.x contains a vulnerability that allows&nbsp;a post-authenticated attacker to upload an arbitrary file to the remote host.","is_workaround_available":false,"workaround":"","detail":"","affected_products":"SonicWall On-premise Email Security (ES) 10.0.9 and earlier versions, Hosted Email Security (HES) 10.0.9 and earlier versions","fixed_software":"<div>- Hosted Email Security (HES) automatically upgraded to Hotfix 10.0.9.6103, no action required by the HES users.</div><div><br></div><div>- On-premise Email Security Windows users should upgrade to 10.0.9.6103 and Appliance users should upgrade to 10.0.9.6105. Hotfix is available for download on mysonicwall.com</div>","credits":"Josh Fleischer, Chris DiGiamo - Mandiant","revision_history":"<ul class=\"summary-detail-item-label-group\">\r\n    <li class=\"summary-detail-label\">Version</li>\r\n    <li class=\"summary-detail-item\"><p>1.0</p></li>\r\n</ul>\r\n<ul class=\"summary-detail-item-label-group\">\r\n    <li class=\"summary-detail-label\">Date</li>\r\n    <li class=\"summary-detail-item\">\r\n        <p>09-Apr-2021</p>\r\n    </li>\r\n</ul>\r\n<ul class=\"summary-detail-item-label-group\">\r\n    <li class=\"summary-detail-label\">Description</li>\r\n    <li class=\"summary-detail-item\"><p>Initial Release.</p></li>\r\n</ul>","references":"https://www.sonicwall.com/support/product-notification/?sol_id=210416112932360","vuln_status":"Applicable","status":"published","is_published":true,"patterns":[],"vulnerable_products":[{"id":18,"name":"Email Security Appliances"},{"id":20,"name":"Hosted Email Security"}]}