Authpoint Authentication Gateway
Monthly
WatchGuard AuthPoint Gateway contains a missing authentication check in its LDAP Sync first-factor authentication that allows unauthenticated remote attackers to bypass single-factor password verification under non-default conditions. Exploitation requires the gateway to be configured with LDAP Sync as the first-factor method and involves some user interaction, but default deployments are unaffected; only the first factor is bypassed, so any additional MFA factors still apply and prevent full account compromise. No public exploit has been identified at time of analysis, and the vendor (WatchGuard PSIRT) rates this as CVSS 4.0 7.4 High with vector AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N.
WatchGuard AuthPoint Gateway contains a missing authentication check in its LDAP Sync first-factor authentication that allows unauthenticated remote attackers to bypass single-factor password verification under non-default conditions. Exploitation requires the gateway to be configured with LDAP Sync as the first-factor method and involves some user interaction, but default deployments are unaffected; only the first factor is bypassed, so any additional MFA factors still apply and prevent full account compromise. No public exploit has been identified at time of analysis, and the vendor (WatchGuard PSIRT) rates this as CVSS 4.0 7.4 High with vector AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N.