{"id":120,"created_when":"2021-04-20T11:12:49Z","created_by":"arun","updated_when":"2021-04-20T11:12:49Z","updated_by":"arun","advisory_id":"SNWLID-2021-0010","title":"SonicWall Email Security post-authentication arbitrary file read vulnerability","published_when":"2021-04-20T11:12:49Z","last_updated_when":"2021-04-20T11:12:49Z","impact":"medium","cvss":"6.7","cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:H","cvss_version":3.0,"cwe":"CWE-22","cve":"CVE-2021-20023","cpe":"","summary":"SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.","is_workaround_available":false,"workaround":"","detail":"","affected_products":"SonicWall On-premise Email Security (ES) 10.0.9 and earlier versions, Hosted Email Security (HES) 10.0.9 and earlier versions","fixed_software":"<div>- Hosted Email Security (HES) automatically upgraded to Hotfix 10.0.9.6173, no action required by the HES users.</div><div><br></div><div>- On-premise Email Security Windows users should upgrade to 10.0.9.6173 and Appliance users should upgrade to 10.0.9.6177. 10.0.9 latest patch is available for download on mysonicwall.com</div>","credits":"Josh Fleischer, Chris DiGiamo - Mandiant","revision_history":"<ul class=\"summary-detail-item-label-group\">\r\n    <li class=\"summary-detail-label\">Version</li>\r\n    <li class=\"summary-detail-item\"><p>1.0</p></li>\r\n</ul>\r\n<ul class=\"summary-detail-item-label-group\">\r\n    <li class=\"summary-detail-label\">Date</li>\r\n    <li class=\"summary-detail-item\">\r\n        <p>20-Apr-2021</p>\r\n    </li>\r\n</ul>\r\n<ul class=\"summary-detail-item-label-group\">\r\n    <li class=\"summary-detail-label\">Description</li>\r\n    <li class=\"summary-detail-item\"><p>Initial Release.</p></li>\r\n</ul>","references":"https://www.sonicwall.com/support/product-notification/?sol_id=210416112932360","vuln_status":"Applicable","status":"published","is_published":true,"patterns":[],"vulnerable_products":[{"name":"Email Security Appliances","id":18},{"name":"Hosted Email Security","id":20}]}