writeups.xyz / Cloud firewall management API SNAFU put 500k SonicWall customers at risk

Submitter : c2a

Date: 2 September 2020

Bounty : undisclosed

Vulnerabilities :

• IDOR

Programs :

• SonicWall

Authors :

• Vangelis Stykas (@Evstykas)

Link :
https://www.pentestpartners.com/security-blog/cloud-firewall-management-api-snafu-put-500k-sonicwall-customers-at-risk/