CVE-2013-1359

Katalog CVE

CVSS 9.8 · Critical EPSS 89,4%

Kerentanan Improper Authentication pada sonicwall analyzer, sonicwall global management system +2 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA interface (/appliance/), which could let a remote malicious user obtain access to the root account.

Rincian

Terbit di NVD

11 Februari 2020

Terakhir diubah

16 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication

EPSS (30 hari)

89,4% peluang dieksploitasi; lebih tinggi dari 99,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.exploit-db.com/exploits/24204 exploit · advisory pihak ketiga · vdb entry
• http://www.exploit-db.com/exploits/24322 exploit · advisory pihak ketiga · vdb entry
• http://www.securityfocus.com/bid/57445 advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id/1028007 advisory pihak ketiga · vdb entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81367 advisory pihak ketiga · vdb entry
• https://fortiguard.com/encyclopedia/ips/35264/multiple-sonicwall-products-authentication-bypass-vulns advisory pihak ketiga
• https://packetstormsecurity.com/files/author/7547/ exploit · advisory pihak ketiga · vdb entry
• https://seclists.org/fulldisclosure/2013/Jan/125 exploit · mailing list · advisory pihak ketiga