CVE-2024-29011

SonicWall GMS Virtual Appliance (Windows) ECM endpoint is affected by CVE-2024-29011 due to a hard-coded credential in the ECMClientAuthenticator class, enabling authentication bypass. Affected: GMS versions 9.3.4 and earlier. Impact: remote authentication bypass; no public exploit details provid...

CVE-2024-29010

The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity XXE injection, potentially resulting in the disclosure of sensitive information. This issue affects GMS: 9.3.4 and earlier versions...