CVE-2020-5143 Information

Description

SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumeration based on the server responses. This vulnerability affected SonicOS Gen 5 version 5.9.1.7 5.9.1.13 Gen 6 version 6.5.4.7 6.5.1.12 6.0.5.3 SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Reference

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0018

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

LOW

Availability Impact

NONE

Base Score

NONE

Base Severity

5.3