Title: Kerio WinRoute Firewall Unspecified Proxy Authentication Bypass Weakness
Severity: LOW
Description:
Kerio WinRoute Firewall is a Windows based firewall application for corporate environments.
The application is prone to an unspecified weakness that allows local users to bypass proxy authentication. Local users may be able to bypass authentication provided by the proxy to gain unauthorized access to HTTPS pages.
Exploiting this issue may permit a local attacker to obtain web pages that are supposed to be administratively prohibited with proxy controls.
Versions prior to Kerio WinRoute Firewall 6.4.1 contain this weakness.
Affected Products:
- Kerio WinRoute Firewall 5.0.1
- Kerio WinRoute Firewall 5.0.2
- Kerio WinRoute Firewall 5.0.3
- Kerio WinRoute Firewall 5.0.4
- Kerio WinRoute Firewall 5.0.5
- Kerio WinRoute Firewall 5.0.6
- Kerio WinRoute Firewall 5.0.7
- Kerio WinRoute Firewall 5.0.8
- Kerio WinRoute Firewall 5.0.9
- Kerio WinRoute Firewall 5.1.0
- Kerio WinRoute Firewall 5.1.1
- Kerio WinRoute Firewall 5.1.10
- Kerio WinRoute Firewall 5.1.2
- Kerio WinRoute Firewall 5.1.3
- Kerio WinRoute Firewall 5.1.4
- Kerio WinRoute Firewall 5.1.5
- Kerio WinRoute Firewall 5.1.6
- Kerio WinRoute Firewall 5.1.7
- Kerio WinRoute Firewall 5.1.8
- Kerio WinRoute Firewall 5.1.9
- Kerio WinRoute Firewall 5.10.0
- Kerio WinRoute Firewall 6.0.0
- Kerio WinRoute Firewall 6.0.1
- Kerio WinRoute Firewall 6.0.11
- Kerio WinRoute Firewall 6.0.2
- Kerio WinRoute Firewall 6.0.3
- Kerio WinRoute Firewall 6.0.4
- Kerio WinRoute Firewall 6.0.5
- Kerio WinRoute Firewall 6.0.6
- Kerio WinRoute Firewall 6.0.7
- Kerio WinRoute Firewall 6.0.8
- Kerio WinRoute Firewall 6.0.9
- Kerio WinRoute Firewall 6.1.0
- Kerio WinRoute Firewall 6.1.1
- Kerio WinRoute Firewall 6.1.2
- Kerio WinRoute Firewall 6.1.3
- Kerio WinRoute Firewall 6.1.4
- Kerio WinRoute Firewall 6.1.4 Patch 1
- Kerio WinRoute Firewall 6.1.4 Patch 2
- Kerio WinRoute Firewall 6.2.0
- Kerio WinRoute Firewall 6.2.1
- Kerio WinRoute Firewall 6.2.2
- Kerio WinRoute Firewall 6.2.3
References:
- Kerio: KWF Release history
- Kerio: Kerio Home Page
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
