The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames on the firewall.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Firewall-1 | Checkpoint | 3.0 (including) | 3.0 (including) |
| Firewall-1 | Checkpoint | 4.0 (including) | 4.0 (including) |