CVE-2013-1359

An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA interface (/appliance/), which could let a remote malicious user obtain access to the root account.

• CWE-287

• http://www.exploit-db.com/exploits/24204Exploit, Third Party Advisory, VDB Entry
• http://www.exploit-db.com/exploits/24322Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/57445Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1028007Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81367Third Party Advisory, VDB Entry
• https://fortiguard.com/encyclopedia/ips/35264/multiple-sonicwall-products-authentication-bypass-vulnsThird Party Advisory
• https://packetstormsecurity.com/files/author/7547/Exploit, Third Party Advisory, VDB Entry
• https://seclists.org/fulldisclosure/2013/Jan/125Exploit, Mailing List, Third Party Advisory
• http://www.exploit-db.com/exploits/24204Exploit, Third Party Advisory, VDB Entry
• http://www.exploit-db.com/exploits/24322Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/57445Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1028007Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81367Third Party Advisory, VDB Entry
• https://fortiguard.com/encyclopedia/ips/35264/multiple-sonicwall-products-authentication-bypass-vulnsThird Party Advisory
• https://packetstormsecurity.com/files/author/7547/Exploit, Third Party Advisory, VDB Entry
• https://seclists.org/fulldisclosure/2013/Jan/125Exploit, Mailing List, Third Party Advisory

Published

Feb 11, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-1349Eval injection vulnerability in ajax.php in openSIS 4.5 thro…
• CVE-2013-1350Verax NMS prior to 2.1.0 has multiple security bypass vulner…9.1
• CVE-2013-1351Verax NMS prior to 2.10 allows authentication via the encryp…5.9
• CVE-2013-1352Verax NMS prior to 2.1.0 uses an encryption key that is hard…7.5
• CVE-2013-1353Orange HRM 2.7.1 allows XSS via the vacancy name.5.4
• CVE-2013-1355Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2013-1360An Authentication Bypass vulnerability exists in DELL SonicW…9.8
• CVE-2013-1361Untrusted search path vulnerability in Lenovo Thinkpad Bluet…
• CVE-2013-1362Incomplete blacklist vulnerability in nrpc.c in Nagios Remot…
• CVE-2013-1364The user.login function in Zabbix before 1.8.16 and 2.x befo…
• CVE-2013-1365Buffer overflow in Adobe Flash Player before 10.3.183.63 and…
• CVE-2013-1366Buffer overflow in Adobe Flash Player before 10.3.183.63 and…