Credential Exposure in SonicWall's Single Sign-On Agent
CVE-2020-5148
What is CVE-2020-5148?
The SonicWall Single Sign-On (SSO) Agent is found to have a vulnerability due to its default configuration, which utilizes NetAPI to probe associated IP addresses within a network. This probing method can be exploited by an attacker to capture the password hash of users with privileged access. Consequently, this could allow the attacker to force the SSO Agent to authenticate improperly, thereby enabling them to bypass predefined firewall access controls and potentially gain unauthorized access to sensitive network resources.
Affected Version(s)
Directory Services Connector 4.1.17 and earlier
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.