CVE-2023-34128
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
The Tomcat application credentials are hardcoded in the SonicWall GMS and Analytics configuration file. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Risk Assessment
Hardcoded credentials may be exploited by unauthorized individuals, potentially leading to a takeover of the applications. This poses a serious threat to the organization's data security.
Recommendation
It is recommended to upgrade to the latest versions of GMS and Analytics that address this issue. Additionally, a security audit should be conducted to identify and remove any hardcoded credentials.
Original NVD description (English source)
Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.