CVE-2013-1359: Critical severity SonicWall Analyzer vulnerability
An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA interface (/appliance/), which could let a remote malicious user obtain access to the root account.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2013-1359?
CVE-2013-1359 is an Authentication Bypass Vulnerability that exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0.
What is the severity of CVE-2013-1359?
The severity of CVE-2013-1359 is critical with a CVSS score of 9.8.
How does the Authentication Bypass Vulnerability in CVE-2013-1359 work?
The vulnerability allows an attacker to bypass authentication by using the skipSessionCheck parameter to the UMA interface.
Which software versions are affected by CVE-2013-1359?
The affected software versions include DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0; and ViewPoint 4.1, 5.0, 5.1, and 6.0.
Are there any known exploits for CVE-2013-1359?
Yes, there are known exploits for CVE-2013-1359. You can find more information about them on the following websites: http://www.exploit-db.com/exploits/24204, http://www.exploit-db.com/exploits/24322, and http://www.securityfocus.com/bid/57445.