CVE-2023-26101

High

Description

In Progress Flowmon Packet Investigator before 12.1.0, a Flowmon user with access to Flowmon Packet Investigator could leverage a path-traversal vulnerability to retrieve files on the Flowmon appliance's local filesystem.

SeverityHigh
CVSS7.5
Exploit probability—
ProductProgress Flowmon Packet Investigator
PublishedApr 21, 2023
First seenApr 21, 2023

How to fix

Update
  • progress flowmon_packet_investigator12.1.0 or later

Affected products

ProductAffected versionsFixed in
progress flowmon_packet_investigatorv < 12.1.012.1.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.