CVE-2013-1359

Published: Feb 11, 2020Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA interface (/appliance/), which could let a remote malicious user obtain access to the root account.

Affected (12)

Products: Sonicwall: Analyzer, Global Management System, Universal Management Appliance, Viewpoint

4 products

Global Management System

Universal Management Appliance

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Sonicwall Analyzer	Version 7.0
Sonicwall Global Management System	Version 4.1
Sonicwall Global Management System	Version 5.0
Sonicwall Global Management System	Version 5.1
Sonicwall Global Management System	Version 6.0
Sonicwall Global Management System	Version 7.0
Sonicwall Universal Management Appliance	Version 5.1
Sonicwall Universal Management Appliance	Version 6.0
Sonicwall Universal Management Appliance	Version 7.0
Sonicwall Viewpoint	Version 4.1
Sonicwall Viewpoint	Version 5.0
Sonicwall Viewpoint	Version 6.0

Related CWEs

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (16)

http://www.exploit-db.com/exploits/24204

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://www.exploit-db.com/exploits/24322

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/57445

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1028007

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/81367

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://fortiguard.com/encyclopedia/ips/35264/multiple-sonicwall-products-authentication-bypass-vulns

Source: cve@mitre.org

Third Party Advisory

https://packetstormsecurity.com/files/author/7547/

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://seclists.org/fulldisclosure/2013/Jan/125

Source: cve@mitre.org

ExploitMailing ListThird Party Advisory

http://www.exploit-db.com/exploits/24204

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

http://www.exploit-db.com/exploits/24322

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/57445

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1028007

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/81367

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://fortiguard.com/encyclopedia/ips/35264/multiple-sonicwall-products-authentication-bypass-vulns

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://packetstormsecurity.com/files/author/7547/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

https://seclists.org/fulldisclosure/2013/Jan/125

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing ListThird Party Advisory

Timeline

No history available yet.