CERT VPN Application Vulnerabilities: Is WatchGuard Affected?

Vulnerability Overview On April 14th, Carnegie Mellon University‚Äôs CERT Coordination Center released vulnerability advisory VU#192371, which disclosed security vulnerabilities in several mobile VPN clients from multiple vendors. In general, the disclosed vulnerabilities involved insecure storage of authentication and session information. Researchers found that some VPN clients stored session cookies unencrypted in log files and in … Continue reading CERT VPN Application Vulnerabilities: Is WatchGuard Affected?