NetSight
IP …
critical9.8

CVE-2023-34132

Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks.

Impact

Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Affected products

VendorProductAffected versions
SonicwallAnalytics
through 2.5.0.4-r7
SonicwallGlobal Management System
before 9.3.2
Version 9.3.2

Weakness classification

CWE-836

References