CVE-2018-9867

In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Administrators user group attempt to download imported certificates. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).

CVSS v3 5.5 MEDIUM
CVSS v2.0 2.1 LOW

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0017	Vendor Advisory
https://www.tenable.com/security/research/tra-2019-08	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:sonicwall:sonicos::::::::
	cpe:2.3:o:sonicwall:sonicos:6.0.5.3-86o:::::::*
	cpe:2.3:o:sonicwall:sonicos:6.2.7.3:::::::*
	cpe:2.3:o:sonicwall:sonicos:6.2.7.8:::::::*
	cpe:2.3:o:sonicwall:sonicos:6.4.0.0:::::::*
	cpe:2.3:o:sonicwall:sonicos:6.5.1.3:::::::*
	cpe:2.3:o:sonicwall:sonicos:6.5.1.8:::::::*
	cpe:2.3:o:sonicwall:sonicos:6.5.2.2:::::::*
	cpe:2.3:o:sonicwall:sonicos:6.5.3.1:::::::*
	cpe:2.3:o:sonicwall:sonicosv:6.5.0.2-8v_rc363:::::vmware::
	cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc366:::::hyper_v::
	cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc367:::::azure::
	cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc368:::::aws::

History

No history.

Information

Published : 2019-02-19 21:29

Updated : 2024-02-28 16:48

NVD link : CVE-2018-9867

Mitre link : CVE-2018-9867

CVE.ORG link : CVE-2018-9867

JSON object : View

Products Affected

sonicwall

sonicosv
sonicos

CWE

CWE-732

Incorrect Permission Assignment for Critical Resource

CWE-285

Improper Authorization

{"id": "CVE-2018-9867", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2019-02-19T21:29:00.320", "references": [{"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0017", "tags": ["Vendor Advisory"], "source": "PSIRT@sonicwall.com"}, {"url": "https://www.tenable.com/security/research/tra-2019-08", "tags": ["Third Party Advisory"], "source": "PSIRT@sonicwall.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-732"}]}, {"type": "Secondary", "source": "PSIRT@sonicwall.com", "description": [{"lang": "en", "value": "CWE-285"}]}], "descriptions": [{"lang": "en", "value": "In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Administrators user group attempt to download imported certificates. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V)."}, {"lang": "es", "value": "En SonicWall SonicOS, los administradores sin permisos completos pueden descargar certificados importados. Ocurre cuando los administradores que no est\u00e1n en el grupo de usuarios de SonicWall Administrators intentan descargar certificados importados. Esta vulnerabilidad afect\u00f3 a SonicOS Gen 5 versi\u00f3n 5.9.1.10 y anteriores, Gen 6 versiones 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o y SonicOSv versiones 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv versi\u00f3n 6.5.0.2.8v_RC368 (AWS), SonicOSv versi\u00f3n 6.5.0.2.8v_RC366 (HYPER_V)."}], "lastModified": "2022-06-16T16:18:55.643", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88AC25CE-9B3C-491B-877E-0BAB68B9CCFC", "versionEndIncluding": "5.9.1.10", "versionStartIncluding": "5.0.0.0"}, {"criteria": "cpe:2.3:o:sonicwall:sonicos:6.0.5.3-86o:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6064655E-6480-4A34-843C-B29C72527111"}, {"criteria": "cpe:2.3:o:sonicwall:sonicos:6.2.7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5567146C-301D-469A-A3E3-1B70D5C9BDCC"}, {"criteria": "cpe:2.3:o:sonicwall:sonicos:6.2.7.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A25F675E-CD61-46F0-92A2-218C956E0AD5"}, {"criteria": "cpe:2.3:o:sonicwall:sonicos:6.4.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C30B8BB4-E0A7-4060-8EED-AE7E42811C86"}, {"criteria": "cpe:2.3:o:sonicwall:sonicos:6.5.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93F31397-0142-439F-BFEC-C77F3D4B7825"}, {"criteria": "cpe:2.3:o:sonicwall:sonicos:6.5.1.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "095E558D-C241-45A4-AA4E-76B3621E341D"}, {"criteria": "cpe:2.3:o:sonicwall:sonicos:6.5.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ACC28FE5-5064-4FEE-8EA0-047C8BA31601"}, {"criteria": "cpe:2.3:o:sonicwall:sonicos:6.5.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "248847AC-1910-448A-BA78-DC6BE942407E"}, {"criteria": "cpe:2.3:o:sonicwall:sonicosv:6.5.0.2-8v_rc363:*:*:*:*:vmware:*:*", "vulnerable": true, "matchCriteriaId": "D76E63B8-63A0-4283-9BB4-89139E4CADE4"}, {"criteria": "cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc366:*:*:*:*:hyper_v:*:*", "vulnerable": true, "matchCriteriaId": "78C8A7D6-30CB-40E1-BF67-0E660EF62DF7"}, {"criteria": "cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc367:*:*:*:*:azure:*:*", "vulnerable": true, "matchCriteriaId": "0C6F0305-2590-45EB-A0C0-3F2417EF57FF"}, {"criteria": "cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc368:*:*:*:*:aws:*:*", "vulnerable": true, "matchCriteriaId": "DDE650F8-9373-483F-847C-14987A1832E6"}], "operator": "OR"}]}], "sourceIdentifier": "PSIRT@sonicwall.com"}