{"id":"CVE-2013-1359","aliases":["EUVD-2013-1398","GHSA-6qrj-83cw-546c"],"status":"published","title":"An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management...","description":"An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA interface (/appliance/), which could let a remote malicious user obtain access to the root account.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.89402,"percentile":0.99787,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-287"],"published":"2020-02-11T16:42:01Z","modified":"2026-06-16T23:51:16Z","exploits":[{"source":"exploitdb","id":"EDB-24204","title":"SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x - Remote Command Execution","type":"webapps","platform":"multiple","date":"2013-01-18","url":"https://www.exploit-db.com/exploits/24204"},{"source":"exploitdb","id":"EDB-24322","title":"SonicWALL Gms 6 - Arbitrary File Upload (Metasploit)","type":"remote","platform":"multiple","date":"2013-01-24","verified":true,"url":"https://www.exploit-db.com/exploits/24322"},{"source":"metasploit","id":"exploit/multi/http/sonicwall_gms_upload","title":"SonicWALL GMS 6 Arbitrary File Upload","type":"exploit","platform":"Java,Linux,Windows","date":"2012-01-17","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/multi/http/sonicwall_gms_upload"}],"products":[{"vendor":"sonicwall","product":"analyzer"},{"vendor":"sonicwall","product":"global_management_system"},{"vendor":"sonicwall","product":"universal_management_appliance"},{"vendor":"sonicwall","product":"viewpoint"}],"references":[{"url":"http://www.securityfocus.com/bid/57445","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/24204","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/24322","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1028007","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/81367","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://packetstormsecurity.com/files/author/7547/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/encyclopedia/ips/35264/multiple-sonicwall-products-authentication-bypass-vulns","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://seclists.org/fulldisclosure/2013/Jan/125","tags":["x_refsource_MISC","x_transferred","Exploit","Mailing List","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1359"},{"url":"https://github.com/advisories/GHSA-6qrj-83cw-546c"}],"sources":{"cve":[{"id":"CVE-2013-1359","description":"An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA interface (/appliance/), which could let a remote malicious user obtain access to the root account.","status":"published","published":"2020-02-11T16:42:01Z","modified":"2024-08-06T14:57:05.116Z","updated_at":"2026-11-02T14:34:58.534075Z"}],"euvd":[{"id":"EUVD-2013-1398","description":"An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA interface (/appliance/), which could let a remote malicious user obtain access to the root account.","status":"published","published":"2020-02-11T16:42:01Z","modified":"2024-08-06T14:57:05Z","updated_at":"2026-11-03T01:56:42.411756Z"}],"ghsa":[{"id":"GHSA-6qrj-83cw-546c","title":"An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management...","description":"An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA interface (/appliance/), which could let a remote malicious user obtain access to the root account.","status":"published","published":"2022-05-05T00:29:33Z","modified":"2023-02-01T05:01:50Z","updated_at":"2026-11-02T14:49:47.696223Z"}],"nvd":[{"id":"CVE-2013-1359","description":"An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA interface (/appliance/), which could let a remote malicious user obtain access to the root account.","status":"published","published":"2020-02-11T17:15:11.593Z","modified":"2026-06-16T23:51:16.583Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:02:52.934105Z"}]}}