CVE-2023-41356: WisdomGarden Tronclass ilearn - Path Traversal

Published Nov 3, 2023

Updated

NCSIST ManageEngine Mobile Device Manager(MDM) APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files.

Affected Software

1 affected component

WisdomGarden Tronclass ilearn=1.62.41849-hotfix-v1-62-84ccf1a5

Remediation

Information

Update to the latest version.

Event History

Nov 3, 2023

CVE Published

06:18 AM

Data Sourced

06:18 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2023-41356?

CVE-2023-41356 is a vulnerability in WisdomGarden Tronclass ilearn that allows an unauthenticated remote attacker to bypass authentication and read arbitrary system files through a path traversal vulnerability in NCSIST ManageEngine Mobile Device Manager(MDM) APP's special function.

What is the severity of CVE-2023-41356?

CVE-2023-41356 has a severity level of medium with a CVSS score of 6.5.

How does CVE-2023-41356 impact WisdomGarden Tronclass ilearn?

CVE-2023-41356 allows an unauthenticated remote attacker to bypass authentication and read arbitrary system files in WisdomGarden Tronclass ilearn.

Is there a fix available for CVE-2023-41356?

At the moment, there is no fix available for CVE-2023-41356. It's recommended to follow the guidance provided by the vendor or software developer.

Where can I find more information about CVE-2023-41356?

You can find more information about CVE-2023-41356 at the following reference: [link](https://www.twcert.org.tw/tw/cp-132-7506-b4e29-1.html)