Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-34134

Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attacker to read administrator password hash via a web

Description

Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attacker to read administrator password hash via a web service call. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SonicWall GMS

Default version status: unknown

  • 9.3.2-SP1 and earlier versionsaffected

SonicWall Analytics

Default version status: unknown

  • 2.5.0.4-R7 and earlier versionsaffected

References