SonicWall warns admins to patch critical auth bypass bugs immediately


The American cybersecurity firm patched a total of 15 security holes today, including some that might allow threat actors to circumvent authentication and gain access to vulnerable on-premises systems running GMS 9.3.2-SP1 or earlier and Analytics or earlier.

According to SonicWall, “This suite of vulnerabilities, for which responsibility was disclosed, includes four (4) vulnerabilities with a CVSSv3 rating of CRITICAL, which allow an attacker to bypass authentication and may expose sensitive information to an unauthorised actor.”

Read More…