CVE-2023-5970
Assigner: sonicwall
Published: 2023-12-05T20:20:01.534Z
State: PUBLISHED
affected: defaultStatus: unknown
platforms: SMA 200
SMA 210
SMA 400
SMA 410
SMA 500v
product: SMA100
vendor: SonicWall
versions: status: affected
version: 10.2.1.9-57sv and earlier versions
datePublic: 2023-12-05T17:10:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass.
value: Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass.
problemTypes: descriptions: cweId: CWE-287
description: CWE-287 Improper Authentication
type: CWE
source: advisory: SNWLID-2023-0018
discovery: EXTERNAL
x_generator: engine: Vulnogram 0.1.0-dev