VYPR
Unrated severityNVD Advisory· Published Jul 13, 2023· Updated Oct 30, 2024

CVE-2023-34134

CVE-2023-34134

Description

Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attacker to read administrator password hash via a web service call. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Affected products

2
  • SonicWall/Analyticsv5
    Range: 2.5.0.4-R7 and earlier versions
  • SonicWall/GMScpe-rescue
    Range: 9.3.2-SP1 and earlier versions

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.