CVE-2023-34137

Description

SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authentication bypass vulnerability. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Reserved 2023-05-25 | Published 2023-07-13 | Updated 2024-10-30 | Assigner sonicwall

Problem types

CWE-305: Authentication Bypass by Primary Weakness

Product status

Default status
unknown

9.3.2-SP1 and earlier versions
affected

Default status
unknown

2.5.0.4-R7 and earlier versions
affected

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 vendor-advisory

www.sonicwall.com/support/notices/230710150218060 related

cve.org (CVE-2023-34137)

nvd.nist.gov (CVE-2023-34137)

Download JSON