Credential Exposure in SonicWall's Single Sign-On Agent

CVE-2020-5148

Summary

The SonicWall Single Sign-On (SSO) Agent is found to have a vulnerability due to its default configuration, which utilizes NetAPI to probe associated IP addresses within a network. This probing method can be exploited by an attacker to capture the password hash of users with privileged access. Consequently, this could allow the attacker to force the SSO Agent to authenticate improperly, thereby enabling them to bypass predefined firewall access controls and potentially gain unauthorized access to sensitive network resources.

References