CVE-2024-6592

moderate-risk
Published 2024-09-25

Incorrect Authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows Authentication Bypass.This issue affects the Authentication Gateway: through 12.10.2; Windows Single Sign-On Client: through 12.7; MacOS Single Sign-On Client: through 12.5.4.

Do I need to act?

~
2.5% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.1/10 Critical
NETWORK / LOW complexity

Affected Products (3)

Authentication Gateway
Single Sign-On Client
Single Sign-On Client

Affected Vendors

Watchguard

References (1)

Mitigation https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00014
46
/ 100
moderate-risk
Severity 31/34 · Critical
Exploitability 6/34 · Minimal
Exposure 9/34 · Low