SonicWall SSL-VPN flaw lets alternate credentials bypass SAML and MFA
SonicWall says attackers can bypass SAML authentication—and any SAML-enforced MFA—on SSL-VPN by logging in with valid credentials for another authentication method; researcher Ryan Harris reported the flaw.
BleepingComputer