CVEvulnerability

CVE-2022-2324

7.5 HIGH Published 2022-07-29 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2022-07-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-290, CWE-358

Description

Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance. This vulnerability impacts 10.0.17.7319 and earlier versions

Affected configurations

• sonicwall hosted email security (<= 10.0.17.7319)

Related

Weakness · CWE (2)

  • CWE-290 Authentication Bypass by Spoofing weakness
  • CWE-358 Improperly Implemented Security Check for Standard weakness

References