SonicWall Email Security Path Traversal Vulnerability

A path traversal vulnerability exists in the SonicWall Email Security appliance, specifically in versions 10.0.33.8195 and earlier. This vulnerability allows attackers to manipulate file system paths by injecting crafted directory-traversal sequences, such as '../', potentially accessing files and directories outside the intended restricted path.

Impact

Exploitation of this vulnerability could lead to unauthorized access of files and directories outside the intended restrictions, allowing for potential information disclosure or manipulation.

Remediation

Users are advised to upgrade to SonicWall Email Security versions 10.0.34.8215, 10.0.34.8223 or higher. For guidance on upgrading, refer to the SonicWall Email Security upgrade documentation.