---
id: 3767
title: "A Watchguard Vulnerability That's a \"Feature\" - GuardLapse"
source_domain: projectblack.io
source_url: "https://projectblack.io/blog/turn-off-this-watchguard-feature-guardlapse/"
published_at: "2023-10-08T06:07:35Z"
tags: ["active-directory", "smb", "sso", "ntlm-relay", "watchguard", "guardlapse"]
phying_url: "https://phying.com/item/3767"
lang: en
---

# A Watchguard Vulnerability That's a "Feature" - GuardLapse

## Summary

GuardLapse: WatchGuard's clientless AD SSO sends its AD account's authentication to any browsing device; a rogue SMB server can capture or relay the hash, reaching Domain Admin in one engagement.

## Intelligence Metadata

- **Sources:** projectblack.io
- **Published:** 2023-10-08T06:07:35Z
- **Original:** https://projectblack.io/blog/turn-off-this-watchguard-feature-guardlapse/
- **Phying News:** https://phying.com/item/3767