PUBLISHED
2026-04-09 15:16
MODIFIED
2026-04-09 15:16
EPSS (Prob. Exploit)
0.60%
Top 52.2%
> DESCRIPTION
An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-204: Observable Response Discrepancy - The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.
> GITHUB SECURITY ADVISORY
GHSA-2hx3-vp6r-mg3f
HIGH
Kiota: Code Generation Literal Injection
AFFECTED PACKAGES:
NUGET / Microsoft.OpenApi.Kiota.Builder
< 1.29.1
Fixed in: 1.29.1
NUGET / Microsoft.OpenApi.Kiota
< 1.29.1
Fixed in: 1.29.1
NUGET / Microsoft.OpenApi.Kiota.Builder
>= 1.30.0, < 1.31.1
Fixed in: 1.31.1
NUGET / Microsoft.OpenApi.Kiota
>= 1.30.0, < 1.31.1
Fixed in: 1.31.1
> HISTORIQUE DES MODIFICATIONS
Première apparition
09/04/2026 15:16
Source: NVD
📊
ENRICHISSEMENT
01/05/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-204: Observable Response Discrepancy - The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intend...
Total des modifications: 1
Dernière mise à jour: 6 months ago