Dell SonicWALL Secure Remote Access Products CVE-2015-2248 Cross Site Request Forgery Vulnerability

Bugtraq ID:	73098
Class:	Input Validation Error
CVE:	CVE-2015-2248
Remote:	Yes
Local:	No
Published:	May 01 2015 12:00AM
Updated:	May 01 2015 12:00AM
Credit:	Veit Hailperin
Vulnerable:	Dell SonicWALL Secure Remote Access 8.0 Dell SonicWALL Secure Remote Access 7.5
Not Vulnerable:	Dell SonicWALL Secure Remote Access 8.0.0.1-16sv Dell SonicWALL Secure Remote Access 7.5.1.0-38sv

Dell SonicWALL Secure Remote Access Products CVE-2015-2248 Cross Site Request Forgery Vulnerability

Dell SonicWALL Secure Remote Access products are prone to a cross-site request-forgery vulnerability because it fails to properly validate HTTP requests.

Exploiting this issue may allow a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.

Dell SonicWALL Secure Remote Access Products CVE-2015-2248 Cross Site Request Forgery Vulnerability

An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

Dell SonicWALL Secure Remote Access Products CVE-2015-2248 Cross Site Request Forgery Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Dell SonicWALL Secure Remote Access Products CVE-2015-2248 Cross Site Request Forgery Vulnerability

References:

• Dell SonicWALL Secure Remote Access - Homepage (Dell)
  
• SonicWALL SRA Series Product Notification (Dell)