CVE-2013-1360

Katalog CVE

CVSS 9.8 · Critical EPSS 23,2%

Kerentanan Improper Authentication pada sonicwall analyzer, sonicwall global management system +2 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote malicious user obtain administrative access.

Rincian

Terbit di NVD

11 Februari 2020

Terakhir diubah

16 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication

EPSS (30 hari)

23,2% peluang dieksploitasi; lebih tinggi dari 97,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.exploit-db.com/exploits/24203 exploit · advisory pihak ketiga · vdb entry
• http://www.securityfocus.com/bid/57446 advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id/1028007 advisory pihak ketiga · vdb entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81366 advisory pihak ketiga · vdb entry
• https://packetstormsecurity.com/files/cve/CVE-2013-1360 advisory pihak ketiga · vdb entry
• http://archives.neohapsis.com/archives/bugtraq/2013-01/0075.html broken link