CVE-2018-5691

5.4MEDIUM

Key Information:

Vendor
Sonicwall
Status
Analyzer
Global Management System
Vendor
CVE Published:
14 January 2018

Summary

SonicWall Global Management System (GMS) 8.1 has XSS via the newName and Name values of the /sgms/TreeControl module.

References

https://www.vulnerability-lab.com/get_content.php?id=1819
x_refsource_MISC
http://documents.software.dell.com/sonicwall-gms-os/8.2/r...
x_refsource_MISC
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-201...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.