CVE-2018-9867CWE-285

In SonicWall SonicOS, administrators without full permissions can download imported certificates

published February 19, 2019

CVSS
—
EPSS
0%
Percentile
10.2
In the wild
Unconfirmed
What it is

In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Administrators user group attempt to download imported certificates. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00207 · 10.2th percentile
Weakness
CWE-285 · Improper Authorization
Published
2019-02-19T21:00Z
EPSS history
Timeline
  • 19 FEB 21:00Z
    In SonicWall SonicOS, administrators without full permissions can download imported certificates
    cvelistv5