CVE-2023-34128

Summary

Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Affected Software

VendorProductVersion RangeStatus
SonicWallGMS9.3.2-SP1 and earlier versionsaffected
SonicWallAnalytics2.5.0.4-R7 and earlier versionsaffected

Weaknesses

  • CWE-260: CWE-260 Password in Configuration File

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References