10

CVE-2013-1359

Exploit

An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA interface (/appliance/), which could let a remote malicious user obtain access to the root account.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sonicwall ≫ Analyzer Version7.0
Sonicwall ≫ Viewpoint Version4.1
Sonicwall ≫ Viewpoint Version5.0
Sonicwall ≫ Viewpoint Version6.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 89.13% 0.995
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.securitytracker.com/id/1028007
Third Party Advisory
VDB Entry
http://www.exploit-db.com/exploits/24204
Third Party Advisory
Exploit
VDB Entry
http://www.exploit-db.com/exploits/24322
Third Party Advisory
Exploit
VDB Entry
http://www.securityfocus.com/bid/57445
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/author/7547/
Third Party Advisory
Exploit
VDB Entry
https://seclists.org/fulldisclosure/2013/Jan/125
Third Party Advisory
Exploit
Mailing List