Threats tagged 'ghsa-rgqx-w933-hx3v'

An improper authentication vulnerability exists in WatchGuard Fireware OS's AuthPoint multi-factor authentication process. This flaw allows a local, unauthenticated attacker on the appliance to hijack another user's in-progress MFA session by sending a specially crafted request and tricking the victim into accepting an MFA push notification. The vulnerability has a medium severity rating with a CVSS score of 5.7. No affected versions or patches are explicitly stated in the provided data.