What is CVE-2018-9867?

CVE-2018-9867 is a medium-severity vulnerability in Sonicwall Sonicos, classified under Improper Authorization. CVSS score: 5.5/10. Published 2019-02-19.

How severe is CVE-2018-9867?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Auth bypass in Sonicwall Sonicos

CVE-2018-9867

In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Administrators user group attempt to download imported certificates. This vulnerabili…

EPSS: 0.002 (10.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Sonicwall Sonicos — versions 5.9.1.10 and earlier, 6.2.7.3, 6.5.1.3
Sonicwall Sonicosv — versions 6.5.0.2.8v_RC367 (AZURE), 6.5.0.2.8v_RC366 (HYPER_V), 6.5.0.2.8v_rc368

Weakness classification (CWE)

References

PSIRT@sonicwall.com (x_refsource_CONFIRM, Vendor Advisory)
PSIRT@sonicwall.com (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-9867?: CVE-2018-9867 is a medium-severity vulnerability in Sonicwall Sonicos, classified under Improper Authorization. CVSS score: 5.5/10. Published 2019-02-19.
How severe is CVE-2018-9867?: Medium severity. CVSS v3 base score is 5.5 out of 10.