CVE-2026-121637:詳細資料

CVE-2026-121637

2026-11-04
15h17 +00:00
A08-Soft and Data Integrity Fail
2026-11-06
21h15 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a network attacker who has obtained a valid header signature to forge the authentication result and transaction identifier in the request body, resulting in unauthorized session outcomes.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-345 Insufficient Verification of Data Authenticity
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

參考資料