10

CVE-2013-1360

Exploit
An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote malicious user obtain administrative access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sonicwall ≫ Analyzer Version7.0
Sonicwall ≫ Viewpoint Version4.1
Sonicwall ≫ Viewpoint Version5.0
Sonicwall ≫ Viewpoint Version6.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 23.21% 0.975
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://archives.neohapsis.com/archives/bugtraq/2013-01/0075.html
Broken Link
http://www.exploit-db.com/exploits/24203
Third Party Advisory
Exploit
VDB Entry
http://www.securityfocus.com/bid/57446
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1028007
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/81366
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/cve/CVE-2013-1360
Third Party Advisory
VDB Entry