In certain Goverlan products, the Windows Firewall is temporarily turned off upon a Goverlan agent update operation. This allows remote attackers to bypass firewall blocking rules for a time period of up to 30 seconds. This affects Goverlan Reach Console before 10.5.1, Reach Server before 3.70.1, and Reach Client Agents before 10.1.11.
CPE | Name | Operator | Version |
---|---|---|---|
client_agent | lt | 10.1.11 | |
reach_console | lt | 10.5.1 | |
reach_server | lt | 3.70.1 |