Domain Name Collision Vulnerability in SonicWall SSL-VPN Products

CVE-2020-5132

What is CVE-2020-5132?

The misconfiguration of SonicWall SSL-VPN products and the associated firewall SSL-VPN feature allows for a domain name collision vulnerability. Organizations that display their internal domain names on public SSL-VPN authentication pages increase their exposure to risks. An attacker aware of these internal domain names could exploit them, leading to potential unauthorized access or information disclosure. It is essential for users of SonicWall products to implement strict access controls and minimize the visibility of internal domain names to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References