CVE-2023-34128 - AskarLabs CVE Database

CVE-2023-34128

Vendor Sonicwall

Product GMS

Weakness CWE-260

Published July 13, 2023

Last update October 31, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Key dates

02Disclosure timeline

July 13, 2023 CVE published

October 31, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-34128 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/260.html

Related vulnerabilities

04Related CVE

CVE-2014-5400 Hospira MedNet Password in Configuration File CVE-2024-45673 IBM Security Verify Bridge information disclosure CVE-2023-2790 TOTOLINK N200RE Telnet Service custom.conf password in configuration file CVE-2025-57754 eslint-ban-moment exposed a sensitive Supabase URI in .env (Credential leak) CVE-2023-53770 MiniDVBLinux 5.4 Unauthenticated Configuration Download via Backup Endpoint

Identifiers

CVE CVE-2023-34128

CWE CWE-260

Affected versions

Vendor Sonicwall

Product GMS

Affected 9.3.2-SP1 and earlier versions

Vendor Sonicwall

Product Analytics

Affected 2.5.0.4-R7 and earlier versions