Aller au contenu
Se connecter
Non notée

CVE-2018-9867 In SonicWall SonicOS, administrators without full permissions can download imported certificates

Description

In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Administrators user group attempt to download imported certificates. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).

Produits et versions touchés

Produit Versions touchées Corrigé en
SonicOS 6.5 6.5.1.3 → 6.5.3.1 Pas de correctif indiqué
SonicOS 6.4.0.0 Pas de correctif indiqué
SonicOS 6.2 6.2.7.3 → 6.2.7.8 Pas de correctif indiqué
SonicOS 6.0.5.3-86o Pas de correctif indiqué
SonicOSv Versions non publiées

Autres CVE de SonicOS

Les 75 CVE de SonicOS →
CVE-2026-19703 A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions… 5.1 Moyenne CVE-2026-77709 A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+… 5.9 Moyenne CVE-2026-77708 A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication… 5.9 Moyenne CVE-2026-19868 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability 7.5 Élevée
Suivre cette CVE