CVE-2023-34124

Summary

CVE-2023-34124 is a vulnerability affecting SonicWall's GMS and Analytics Web Services. The authentication mechanism in these versions (GMS: 9.3.2-SP1 and earlier, Analytics: 2.5.0.4-R7 and earlier) contains insufficient checks, enabling unauthorized users to bypass authentication. This weakness poses a significant security risk, as it allows unauthenticated access to sensitive information. Organizations using these versions are advised to apply the necessary patches as soon as possible to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.