Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets
En bref
Sévérité
HIGH 8.7
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
WatchGuard
Statut NVD
Received
Description
An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated attacker with access to the management SSH interface to extract sensitive configuration data by submitting a specially crafted request.
