Description
Ingate Firewall 4.1.3 and earlier does not terminate the PPTP session for an active user when the administrator disables that user from a resource, which could allow remote authenticated users to retain unauthorized access to resources.
References
- ingate-firewall-unath-access(19123) vdb-entry
- 12383 vdb-entry
- 20050127 Ingate Firewall: Removed PPTP tunnels not deactivated mailing-list
- 1013022 vdb-entry
- http://www.ingate.com/relnote-422.php
- 14060 third-party-advisory