CVE-2013-1359

🗓️ 11 Feb 2020 16:42:01Reported by mitreType

cve🔗 web.nvd.nist.gov👁 67 Views🌐 WEB

Authentication Bypass Vulnerability in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA interface (/appliance/), allowing remote access to root account

Reporter	Title	Published	Views	Family All 16
0day.today	SonicWALL GMS 6 Arbitrary File Upload Vulnerability	24 Jan 201300:00	–	zdt
Circl	CVE-2013-1359	24 Jan 201300:00	–	circl
Check Point Advisories	Multiple SonicWALL Products Authentication Bypass - Ver2 (CVE-2013-1359)	31 Mar 201400:00	–	checkpoint_advisories
Cvelist	CVE-2013-1359	11 Feb 202016:42	–	cvelist
Exploit DB	SonicWALL Gms 6 - Arbitrary File Upload (Metasploit)	24 Jan 201300:00	–	exploitdb
Metasploit	SonicWALL GMS 6 Arbitrary File Upload	22 Jan 201300:54	–	metasploit
NVD	CVE-2013-1359	11 Feb 202017:15	–	nvd
OpenVAS	Multiple SonicWALL Products Authentication Bypass Vulnerability	18 Jan 201300:00	–	openvas
Packet Storm	SonicWALL GMS 6 Arbitrary File Upload	25 Jan 201300:00	–	packetstorm
Prion	Authentication flaw	11 Feb 202017:15	–	prion

NVD

Node

sonicwall analyzerMatch7.0

sonicwall global_management_systemMatch4.1

sonicwall global_management_systemMatch5.0

sonicwall global_management_systemMatch5.1

sonicwall global_management_systemMatch6.0

sonicwall global_management_systemMatch7.0

sonicwall universal_management_applianceMatch5.1

sonicwall universal_management_applianceMatch6.0

sonicwall universal_management_applianceMatch7.0

sonicwall viewpointMatch4.1

sonicwall viewpointMatch5.0

sonicwall viewpointMatch6.0

Source	Link
exploit-db	www.exploit-db.com/exploits/24322
securityfocus	www.securityfocus.com/bid/57445
packetstormsecurity	www.packetstormsecurity.com/files/author/7547/
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/81367
fortiguard	www.fortiguard.com/encyclopedia/ips/35264/multiple-sonicwall-products-authentication-bypass-vulns
securitytracker	www.securitytracker.com/id/1028007
exploit-db	www.exploit-db.com/exploits/24204
seclists	www.seclists.org/fulldisclosure/2013/Jan/125

Parameter	Position	Path	Description	CWE
skipSessionCheck	query param	appliance/applianceMainPage?skipSessionCheck=1	Authentication bypass via skipSessionCheck parameter on SonicWALL UMA interface, enabling unauthorized root access	CWE-287

21 Nov 2024 01:49Current

9.1High risk

Vulners AI Score9.1

CVSS 3.19.8

CVSS 210

EPSS0.89468

CWE-287