ZDI-23-1155: SonicWALL GMS Virtual Appliance HttpDigestAuthenticator Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of SonicWALL GMS Virtual Appliance. Authentication is not required to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-1155?
ZDI-23-1155 is considered a critical vulnerability due to its ability to allow remote attackers to bypass authentication.
How do I fix ZDI-23-1155?
To fix ZDI-23-1155, update the SonicWALL GMS Virtual Appliance to the latest patched version provided by the vendor.
Which versions of SonicWALL GMS Virtual Appliance are affected by ZDI-23-1155?
ZDI-23-1155 affects all installations of SonicWALL GMS Virtual Appliance that have not been updated to the latest version.
Can ZDI-23-1155 be exploited without authentication?
Yes, ZDI-23-1155 can be exploited without requiring authentication, making it particularly dangerous.
What impact does ZDI-23-1155 have on affected systems?
The impact of ZDI-23-1155 includes unauthorized access and potential control over affected SonicWALL GMS Virtual Appliance installations.