← Database

CVE-2007-6385

LOW CVSS: 2.1 Published: 2007-12-15 Modified: 2026-06-16

Description

The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.

Affected Platforms

Kerio Winroute Firewall

Weakness Type

CWE-287

References