Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-5132

SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision vulnerability. When the users publicly

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sonicwall

Description

SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision vulnerability. When the users publicly display their organization’s internal domain names in the SSL-VPN authentication page, an attacker with knowledge of internal domain names can potentially take advantage of this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SonicWall SMA100

  • SMA100 10.2.0.2-20svaffected

SonicWall SMA1000

  • SMA1000 12.4.0-2223affected

SonicWall SonicOS

  • SonicOS 6.5.4.6-79naffected

References