Unscored CVE-2023-34128 EUVD-2023-38230GHSA-jgp4-2vpq-mm78

Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. This issue affects GMS: 9.3.2-SP1 and earli…

Published Jul 13, 2023 · Updated Oct 31, 2024 · Assigned by sonicwall

Vendor: SonicWall Product: Analytics Product: GMS Category: Network devices

Description

Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Affected products

Vendor	Product	Affected	Fixed
SonicWall	GMS	9.3.2-SP1 and earlier versions	—
SonicWall	Analytics	2.5.0.4-R7 and earlier versions	—

Advisories 1

WID-SEC-2023-1736 SonicWall GMS und SonicWall Analytics: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 12, 2023

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 vendor-advisory
https://www.sonicwall.com/support/notices/230710150218060 related