CVE-2024-6592criticalCWE-306

CVE-2024-6592: fallo crítico en WatchGuard SSO Agent

WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear SSO Agent+ Monitorear SSO Client

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

48Vexday Risk Score

Sin señal de explotación. Ella tiene prueba de concepto pública.

ssvc Attendcvss 9.3epss 1.2%
de la publicación al armael mismo día
Publicada en NVD25 sept
1ª PoC17 sept
An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to forge communications to affected components. In the event an attacker has already gained network access, they could exploit this vulnerability to retrieve authenticated usernames and group memberships from the Single Sign-On Agent or send arbitrary account and group information to the Single Sign-On Agent for their host. This vulnerability cannot be used by an attacker to gain access to user credentials.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Productos afectados
WatchGuard · SSO AgentWatchGuard · SSO Client
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — WatchGuard SSO Agent

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-6594HIGHWatchGuard Firebox Single Sign-On Client Denial-of-ServiceEPSS 0.6%CVE-2024-6593CRITICALWatchGuard Firebox Single Sign-On Agent Management Interface Authentication BypassEPSS 0.6%