NetSight
IP …
low2.1

CVE-2007-6385

The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors.

Impact

The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.

Affected products

VendorProductAffected versions
KerioWinroute Firewall
through 6.4.0
Versions 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5

Weakness classification

CWE-287

References