The client authentication interface for Check Point Firewall-1 4.0 and previous versions generates different error messages for invalid usernames versus invalid passwords, which allows remote malicious users to identify valid usernames on the firewall.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
checkpoint firewall-1 3.0 |
||
checkpoint firewall-1 4.0 |