Description
The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames on the firewall.
Affected products
- checkpoint / firewall-13.0 – 3.0
- checkpoint / firewall-14.0 – 4.0