This vulnerability (CWE-287) in WatchGuard AuthPoint Authentication Gateway's LDAP Sync first-factor authentication allows remote attackers to bypass single-factor password verification when the system is configured in certain non-default ways. The flaw is due to missing or improper authentication validation. The vulnerability affects versions from 4.2.2 up to but excluding 7.5.1. The CVSS 4.0 base score is 7.4, indicating high severity, with network attack vector, low attack complexity, partial attack prerequisites, and high impact on confidentiality and integrity. No known exploits are reported in the wild. Additional authentication factors remain enforced, mitigating full compromise.

An attacker can bypass the single-factor password verification step remotely under specific non-default configurations, potentially gaining unauthorized access to the authentication gateway. However, if multi-factor authentication is enabled, the attacker must still bypass additional factors, limiting the overall impact. There are no reports of active exploitation.

No explicit patch or vendor advisory is provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, ensure multi-factor authentication is enabled and review LDAP Sync configurations to avoid non-default settings that could trigger the vulnerability.