Description (CNA)
Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SonicWall / SMA100 | affected 10.2.1.9-57sv and earlier versions |
CWE
CWE-287
References
ADP enrichment
No English description supplied.