NetSight
IP …
critical9.8

CVE-2023-34124

The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass.

Impact

The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Affected products

VendorProductAffected versions
SonicwallAnalytics
through 2.5.0.4-r7
SonicwallGlobal Management System
before 9.3.2
Version 9.3.2

Weakness classification

CWE-305CWE-287

References