CVE-1999-0291: High severity Qbik WinGate vulnerability
The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authentication.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Configure WinGate to require a strong administrative password and enable authentication for the proxy and management interfaces so that proxy redirection cannot be performed without credentials.
Qbik WinGate admin_password = set a strong password / enable authentication - Compensating control
Until authentication is enforced, restrict access to WinGate management and proxy ports to trusted IPs using firewall rules, VPNs, or network ACLs; block access from untrusted networks.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0291?
CVE-1999-0291 is considered a critical vulnerability due to the absence of authentication on the WinGate proxy.
How do I fix CVE-1999-0291?
To fix CVE-1999-0291, ensure that you configure a strong password for the WinGate proxy.
What types of software are affected by CVE-1999-0291?
CVE-1999-0291 affects all versions of Qbik WinGate that are installed without a password.
What are the risks associated with CVE-1999-0291?
The risks of CVE-1999-0291 include unauthorized access and the potential for remote attackers to redirect connections.
Can CVE-1999-0291 lead to data breaches?
Yes, CVE-1999-0291 can lead to data breaches as it allows attackers to intercept and manipulate traffic without authentication.