CVE Vulnerabilities

CVE-2023-34134

Published: Jul 13, 2023 | Modified: Jul 25, 2023
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attacker to read administrator password hash via a web service call. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Affected Software

Name Vendor Start Version End Version
Analytics Sonicwall * 2.5.0.4-r7 (including)
Global_management_system Sonicwall * 9.3.2 (excluding)
Global_management_system Sonicwall 9.3.2 (including) 9.3.2 (including)
Global_management_system Sonicwall 9.3.2-sp1 (including) 9.3.2-sp1 (including)

References