CVE-2023-34128 Hardcoded credentials in Analytics

Critical 9.8 Published 13 Jul 2023 Updated 31 Oct 2024

Hardcoded Tomcat credentials in SonicWall GMS and Analytics allow attackers to access the application and potentially take over accounts.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-34128?

CVE-2023-34128 is a critical vulnerability in SonicWall Analytics, published on 13 Jul 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

Weakness: CWE-522, CWE-260

Which versions are affected by CVE-2023-34128?

It affects 2 products.

Products include Sonicwall Analytics, Sonicwall Global Management System.

How do I fix CVE-2023-34128?

No fix has been published for CVE-2023-34128 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-34128 being exploited?

There is no known exploitation of CVE-2023-34128 in the wild and no public exploit code.

Sources

Also known as GHSA-jgp4-2vpq-mm78.