Description: Luke Jennings has reported a weakness in some WatchGuard Firebox products, which can be exploited by malicious people to determine valid usernames.
The problem is that different responses are being sent when using a valid or an invalid username. This can be exploited to determine valid usernames.
The weakness is reported in WatchGuard Firebox X Peak and X Core e-series prior to firmware version 10.
Solution: Update to firmware version 10.
Provided and/or discovered by: Luke Jennings, MWR InfoSecurity
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
