CVE-2026-82332:详情

CVE-2026-82332

2026-10-27
16h17 +00:00
Authorization problems
A07-Identif. and Authent. Fail
2026-11-04
21h18 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthenticated attacker on the appliance to hijack another user's in-progress MFA session by supplying a specially crafted request and convincing the victim user to accept an MFA push notification.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
CWE-346 Origin Validation Error
The product does not properly verify that the source of data or communication is valid.

参考资料