In certain Goverlan products, the Windows Firewall is temporarily turned off upon a Goverlan agent update operation. This allows remote attackers to bypass firewall blocking rules for a time period of up to 30 seconds. This affects Goverlan Reach Console before 10.5.1, Reach Server before 3.70.1, and Reach Client Agents before 10.1.11.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Client_agent | Goverlan | * | 10.1.11 (excluding) |
| Reach_console | Goverlan | * | 10.5.1 (excluding) |
| Reach_server | Goverlan | * | 3.70.1 (excluding) |