Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets
At a glance
Severity
HIGH 8.7
State
PUBLISHED
Published
Updated
Assigner
WatchGuard
NVD status
Received
Description
An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated attacker with access to the management SSH interface to extract sensitive configuration data by submitting a specially crafted request.
