VULNERABILITY INTELLIGENCE

CVE-2007-6385

CVSS score2.1 LOW
EPSS probability0.37%
CISA KEVNot currently listed
Published2007-12-15
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.

Weakness classification

  • CWE-287: Improper Authentication

Primary references