Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets

An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated attacker with access to the management SSH interface to extract sensitive configuration data by submitting a specially crafted request.