WatchGuard Firmware 12.11.6 is it affected by the "pac4j-jwt JwtAuthenticator Authentication Bypass"

Lapu_LapuLapu_Lapu
in Technical Discussion

Hi Community,

I just wanted to ask if the Watchguard firmware version 12.11.6 is affected by this exploit "pac4j-jwt JwtAuthenticator Authentication Bypass"

https://www.vulncheck.com/advisories/pac4j-jwt-jwtauthenticator-authentication-bypass

Kindly advise what is the workaround.

Answers

  • james.carsonjames.carson Moderator, WatchGuard Representative

    Hi @Lapu_Lapu
    WatchGuard doesn't utilize the JwtAuthenticator component that this vulnerability is posted for, so it would not be applicable to any of our products at this time.

Sign In to comment.