CVE-2017-8055

CVE-2017-8055 describes a user enumeration vulnerability in WatchGuard Fireware v11.12.1 and earlier, specifically within the Firebox XML-RPC login handler. An attacker can differentiate between valid and invalid usernames by sending login requests with blank passwords, enabling the enumeration of legitimate user accounts. This vulnerability has a CVSS score of 5.3 (Medium) with a low impact on confidentiality, requiring no privileges or user interaction. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.