ZDI-CAN-21221: ZDI-23-1155: SonicWALL GMS Virtual Appliance HttpDigestAuthenticator Authentication Bypass Vulnerability
Published Aug 21, 2023
·Updated
This vulnerability allows remote attackers to bypass authentication on affected installations of SonicWALL GMS Virtual Appliance. Authentication is not required to exploit this vulnerability.
Affected Software
1 affected component
SonicWall GMS Virtual Appliance
Event History
Aug 21, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-21221?
The severity of ZDI-CAN-21221 is considered high due to the ability for remote attackers to bypass authentication.
2
How do I fix ZDI-CAN-21221?
To fix ZDI-CAN-21221, it is recommended to apply the latest patches and updates provided by SonicWALL for the GMS Virtual Appliance.
3
What systems are affected by ZDI-CAN-21221?
ZDI-CAN-21221 affects the SonicWALL GMS Virtual Appliance installations.
4
Who can exploit ZDI-CAN-21221?
Any remote attacker can exploit ZDI-CAN-21221 as it does not require authentication.
5
What are the risks of ZDI-CAN-21221?
The risks of ZDI-CAN-21221 include unauthorized access to the management interface, leading to potential data breaches or system compromise.