Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-9867

In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Administrators user group

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sonicwall

Description

In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Administrators user group attempt to download imported certificates. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SonicWall SonicOS

  • 5.9.1.10 and earlieraffected
  • 6.2.7.3affected
  • 6.5.1.3affected
  • 6.5.2.2affected
  • 6.5.3.1affected
  • 6.2.7.8affected
  • 6.4.0.0affected
  • 6.5.1.8affected
  • 6.0.5.3-86oaffected

SonicWall SonicOSv

  • 6.5.0.2-8v_RC363 (VMWARE)affected
  • 6.5.0.2.8v_RC367 (AZURE)affected
  • 6.5.0.2.8v_RC368 (AWS)affected
  • 6.5.0.2.8v_RC366 (HYPER_V)affected

References