PT-2022-20935 · Watchguard · Watchguard Xtm+2
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
WatchGuard Firebox and XTM appliances versions prior to 12.1.4
WatchGuard Firebox and XTM appliances versions prior to 12.5.10
WatchGuard Firebox and XTM appliances versions prior to 12.8.1
Description
The issue allows an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious request to exposed authentication endpoints.
Recommendations
For versions prior to 12.1.4, update to Fireware OS 12.1.4 or later.
For versions prior to 12.5.10, update to Fireware OS 12.5.10 or later.
For versions prior to 12.8.1, update to Fireware OS 12.8.1 or later.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Fireware Os
Watchguard Firebox
Watchguard Xtm