CVE Daily

CVE-2007-6385

The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enfor...

Low CVSS 2.1

Overview

The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.

CWE: CWE-287 Published: 2007-12-15T02:46:00.000
Risk analysis

This vulnerability is rated 🟢 LOW.

  • CVSS: 2.1 (LOW)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags