CVE-2014-4976

Summary (CVE-2014-4976): Dell SonicWALL Scrutinizer 11.0.1 is affected by a vulnerability where remote authenticated users can change other users’ passwords by manipulating the user ID in the savePrefs parameter of a change-password request to cgi-bin/admin.cgi. The vulnerability targets the auth...