Gateway authentication bypass
High
Example incident
- Status
- Patch available
- Affected
- Example Gateway 1.8.0
- Fixed in
- 1.8.3
Summary
A crafted request can skip authentication on the self-hosted gateway admin port.
Updates
-
38m ago
Vendor patch published
Incident brief
Gateway authentication bypass
High · Patch available
Affected: Example Gateway 1.8.0
Fixed in: 1.8.3
A crafted request can skip authentication on the self-hosted gateway admin port.
What to do:
- Upgrade the gateway to 1.8.3.
- Restrict the admin port to the office network.
Sources:
- Vendor advisory https://example.com/gateway-advisory