| Package | Affected versions | Patched versions |
|---|---|---|
| winroute firewall | = 5.0.1= 5.0.2= 5.0.3= 5.0.4= 5.0.5= 5.0.6= 5.0.7= 5.0.8= 5.0.9= 5.1= 5.1.1= 5.1.10= 5.1.2= 5.1.3= 5.1.4= 5.1.5= 5.1.6= 5.1.7= 5.1.8= 5.1.9= 5.10= 6.0= 6.0.1= 6.0.11= 6.0.2= 6.0.3= 6.0.4= 6.0.5= 6.0.6= 6.0.7= 6.0.8= 6.0.9= 6.1= 6.1.1= 6.1.2= 6.1.3= 6.1.4= 6.1.4_patch_1= 6.1.4_patch_2= 6.2= 6.2.1= 6.2.2= 6.2.3= 6.3.0= 6.3.1≤ 6.4.0 |
The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free