Lucene search
MitreCVELIST:CVE-2018-20799HistoryMar 01, 2019 - 3:00 p.m.
CVE-2018-20799
2019-03-0115:00:00
mitre
www.cve.org
0.001 Low
EPSS
Percentile
38.3%
In pfSense 2.4.4_1, blocking of source IP addresses on the basis of failed HTTPS authentication is inconsistent with blocking of source IP addresses on the basis of failed SSH authentication (the behavior does not match the sshguard documentation), which might make it easier for attackers to bypass intended access restrictions.
References
Related
nvd
nvd
CVE-2018-20799
2019-03-01 15:29:00
cve
cve
CVE-2018-20799
2019-03-01 15:29:00
prion
prion
Authentication flaw
2019-03-01 15:29:00
nessus
nessus
pfSense < 2.4.4-p3 Multiple Vulnerabilities
2021-02-11 00:00:00