CVE-2021-4471 — TG8 Firewall Unauthenticated User Password Disclosure
TG8 Firewall exposes a directory such as /data/ over HTTP without authentication. This directory stores credential files for previously logged-in users. A remote unauthenticated…
Published: 2025-11-14 · CVSS: 8.7 · CVSS 4.0
TG8 Firewall exposes a directory such as /data/ over HTTP without authentication. This directory stores credential files for previously logged-in users. A remote unauthenticated attacker can enumerate and download files within the directory to obtain valid account usernames and passwords, leading to loss of confidentiality and further unauthorized access.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7