CVE-2017-8055: Medium severity WatchGuard Fireware vulnerability
WatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler. A login request that contains a blank password sent to the XML-RPC agent in Fireware v11.12.1 and earlier returns different responses for valid and invalid usernames. An attacker could exploit this vulnerability to enumerate valid usernames on an affected Firebox.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-8055?
CVE-2017-8055 has a medium severity rating due to the potential for user enumeration vulnerabilities.
How do I fix CVE-2017-8055?
To fix CVE-2017-8055, upgrade WatchGuard Fireware to version 11.12.2 or later.
What systems are affected by CVE-2017-8055?
CVE-2017-8055 affects WatchGuard Fireware versions up to and including 11.12.1.
What type of vulnerability is CVE-2017-8055?
CVE-2017-8055 is a user enumeration vulnerability in the Firebox XML-RPC login handler.
Can CVE-2017-8055 be exploited remotely?
Yes, an attacker can exploit CVE-2017-8055 remotely by sending a login request with a blank password.