Authentication flaw

2007-12-1502:46:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.4%

JSON

The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.

CPENameOperatorVersion
winroute_firewalleq5.1.5
winroute_firewalleq6.1.4-patch-1
winroute_firewalleq6.1.1
winroute_firewalleq5.1.2
winroute_firewalleq6.2
winroute_firewalleq5.0.4
winroute_firewalleq5.0.1
winroute_firewalleq5.1.1
winroute_firewalleq6.0.1
winroute_firewalleq6.0.4

Name	Operator	Version
winroute_firewall	eq	5.1.5
winroute_firewall	eq	6.1.4-patch-1
winroute_firewall	eq	6.1.1
winroute_firewall	eq	5.1.2
winroute_firewall	eq	6.2
winroute_firewall	eq	5.0.4
winroute_firewall	eq	5.0.1
winroute_firewall	eq	5.1.1
winroute_firewall	eq	6.0.1
winroute_firewall	eq	6.0.4

Rows per page:

1-10 of 461

References

osvdb.org/42122

secunia.com/advisories/28072

www.kerio.com/kwf_history.html

www.securityfocus.com/bid/26851

www.securitytracker.com/id?1019095

www.vupen.com/english/advisories/2007/4212

exchange.xforce.ibmcloud.com/vulnerabilities/39020