Domain Name Collision Vulnerability in SonicWall SSL-VPN Products

CVE-2020-5132

Summary

The misconfiguration of SonicWall SSL-VPN products and the associated firewall SSL-VPN feature allows for a domain name collision vulnerability. Organizations that display their internal domain names on public SSL-VPN authentication pages increase their exposure to risks. An attacker aware of these internal domain names could exploit them, leading to potential unauthorized access or information disclosure. It is essential for users of SonicWall products to implement strict access controls and minimize the visibility of internal domain names to mitigate this risk.

References