CVE-2023-34137

creationtimestamp| type| source ---|---|--- 2023-07-13 09:12:22+00:00| seen| Telegram/RO-3KQYYmJp6rc3OyQ2a4CDza1Efh5pGtP13e3EKmucFw 2023-07-13 09:58:30+00:00| seen| https://t.me/cibsecurity/66629 2023-07-13 10:11:28+00:00| seen| https://t.me/KomunitiSiber/480 2023-07-13 15:09:07+00:00| seen|...

New Vulnerabilities Disclosed in SonicWall and Fortinet Network Security Products

SonicWall on Wednesday urged customers of Global Management System GMS firewall management and Analytics network reporting engine software to apply the latest fixes to secure against a set of 15 security flaws that could be exploited by a threat actor to circumvent authentication and access...

CVE-2023-34137

CVE-2023-34137 concerns an authentication bypass in SonicWall GMS and Analytics due to CAS Web Services using static credentials. Affected: GMS 9.3.2-SP1 and earlier; Analytics 2.5.0.4-R7 and earlier. Consequence: unauthorized access to data/operations via CAS authentication bypass. Mitigation: f...