SonicWall Global Management System 授权问题漏洞

The SonicWall Global Management System GMS provides a holistic approach to managing the entire network security environment by business process and service level. A command execution vulnerability exists in SonicWall GMS version 9.3. An attacker could exploit the vulnerability to locally elevate...

CVE-2013-1359

An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System GMS 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance UMA 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA interface /appliance/,...

Authentication flaw

An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System GMS 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance UMA 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA interface /appliance/,...

CVE-2013-1359

CPU : CVE-2013-1359 describes an authentication bypass in Dell SonicWALL products (Analyzer, GMS, UMA, ViewPoint) where the skipSessionCheck parameter to the UMA interface (/appliance/) can be set to 1 to bypass login and access root. Affected products include SonicWALL ViewPoint, Analyzer, GMS (...

CVE-2013-1359

An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System GMS 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance UMA 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA interface /appliance/,...

CVE-2013-1360

An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System GMS 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance UMA 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote...

Global Management System (GMS) Unauthorized User SQL Injection

A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GMS versions 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1. CVE: CVE-2019-7478 Last updated: Dec. 30, 2019, 8 p.m...

SonicWall Global Management System Webservice Module SQL Injection Vulnerability

The SonicWall Global Management System GMS is a global management system from SonicWall USA. The system enables rapid deployment and centralized management of Dell SonicWALL firewall, anti-spam, backup and recovery, and secure remote access solutions. A SQL injection vulnerability exists in the...

CVE-2019-7476

A vulnerability in SonicWall Global Management System GMS, allow a remote user to gain access to the appliance using existing SSH key. This vulnerability affects GMS versions 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier...

SonicWall Global Management System (GMS) Deprecated SSH keys Vulnerability

A vulnerability in SonicWall Global Management System GMS, allow a remote user to gain access to the appliance using existing SSH key. This vulnerability affects GMS versions 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier. CVE: CVE-2019-7476 Last updated: April 26, 2019, 11 a.m...

VulnCheck KEV: CVE-2018-9866

A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System GMS virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier...

SonicWall Global Management System Remote Code Execution (CVE-2018-9866)

A remote code execution vulnerability exists in SonicWall Global Management System. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2018-9866

A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System GMS virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier...

PT-2018-19085 · Sonicwall · Sonicwall Global Management System

Name of the Vulnerable Software and Affected Versions: SonicWall Global Management System GMS versions 8.1 and earlier Description: A vulnerability in the lack of validation of user-supplied parameters passed to XML-RPC calls allows remote users to execute arbitrary code. Recommendations: For...

SonicWall Global Management System XMLRPC Exploit

This Metasploit module exploits a vulnerability in SonicWall Global Management System Virtual Appliance versions 8.1 Build 8110.1197 and below. This virtual appliance can be downloaded from http://www.sonicwall.com/products/sonicwall-gms/ and is used 'in a holistic way to manage your entire netwo...

SonicWall Global Management System XMLRPC

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "SonicWall Global Management System XMLRPC settimezone Unath RCE", 'Description' = %q This module exploits a vulnerability in SonicWall Global...

SonicWALL Global Management System (GMS) / Analyzer sgms Webapp File Deletion

The SonicWALL Global Management System GMS / Analyzer running on the remote host is affected by a file deletion vulnerability within the sgms web application due to the failure to validate user input to the ChartDisplayServlet servlet. An unauthenticated, remote attacker can exploit this issue to...

Dell SonicWALL Global Management System Cross-Site Scripting Vulnerability

The Dell SonicWall Global Management System GMS is a global management system from Dell, USA. The system enables rapid deployment and centralized management of Dell SonicWALL firewall, anti-spam, backup and recovery, and secure remote access solutions. A cross-site scripting vulnerability exists ...

CVE-2018-5691

SonicWall Global Management System GMS 8.1 has XSS via the newName and Name values of the /sgms/TreeControl module...

SonicWall Global Management System (GMS) 8.1 cross-site scripting

SonicWall Global Management System GMS 8.1 has XSS via the newName and Name values of the /sgms/TreeControl module. CVE: CVE-2018-5691 Last updated: March 12, 2018, 5:31 p.m...