CVE-2021-4471

TG8 Firewall exposes a directory such as /data/ over HTTP without authentication. This directory stores credential files for previously logged-in users. A remote unauthenticated attacker can enumerate and download files within the directory to obtain valid account usernames and passwords, leading to loss of confidentiality and further unauthorized access.

Score

CVSS 4.0 8.7 High

Status

Deferred - disclosure@vulncheck.com

Published

2025-11-14

Last modified

2025-11-17

Weaknesses

CWE-538

Affected products

• Tg8 Firewall (Tg8)

References

• https://ssd-disclosure.com/ssd-advisory-tg8-firewall-preauth-rce-and-password-disclosure/
• https://web.archive.org/web/20211024224240/http://www.tg8security.com/
• https://www.vulncheck.com/advisories/tg8-firewall-unauthenticated-user-password-disclosure