Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticated administrator to read-protected system files. This issue affects: Nozomi Networks Guardian 20.0.7.3 version 20.0.7.3 and prior versions. Nozomi Networks CMC 20.0.7.3 version 20.0.7.3 and prior versions.
| Software | From | Fixed in |
|---|---|---|
| nozominetworks / guardian | 20.0.0.0 | 20.0.7.4 |
| nozominetworks / guardian | 19.0.0 | 19.0.12 |
| nozominetworks / central_management_control | 19.0.0 | 19.0.12.x |
| nozominetworks / central_management_control | 20.0.0.0 | 20.0.7.4 |