Aller au contenu
en Se connecter
7.2 Élevée

CVE-2025-40889 A path traversal vulnerability was discovered in the Time Machine functionality due to missing validation of two input…

Description

A path traversal vulnerability was discovered in the Time Machine functionality due to missing validation of two input parameters. An authenticated user with limited privileges, by issuing a specifically-crafted request, can potentially alter the structure and content of files in the /data folder, and/or affect their availability.

Produits et versions touchés

Produit Versions touchées Corrigé en
Guardian 25.2 premières → < 25.2.0 25.2.0
CMC 25.2 premières → < 25.2.0 25.2.0

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Guardian

Les 53 CVE de Guardian →
CVE-2026-33924 Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient… 7.5 Élevée CVE-2026-33923 A signature verification vulnerability was discovered in the update installation functionality due to inconsistent… 7.5 Élevée CVE-2026-33920 A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to… 5.1 Moyenne CVE-2026-33391 An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient… 5.3 Moyenne
Suivre cette CVE