by Kastro
Paper/Archive/CVE-2024-6593

CVE-2024-6593

WatchGuard SSO Agent — WatchGuard Firebox Single Sign-On Agent Management Interface Authentication Bypass

EPSS 0.6%CVSS 9.3
critical.is priorityof 100
38
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 47.9.479 × 209.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows allows an attacker with network access to execute restricted management commands. An attacker that has already gained network access could exploit this vulnerability to retrieve authenticated usernames and group memberships from the Single Sign-On Agent or tamper with the agent configuration. This vulnerability cannot be used by an attacker to gain access to user credentials.

Affected

ProductAffectedFixed inSource
SSO Agent12.0 – 12.10.2–CNA
authentication_gateway≤ 12.10.2–CISA-ADP

Scores by source

WatchGuard (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorypsirt.watchguard.com/CVE-2024-6593writeupredteam-pentesting.de/advisories/rt-sa-2024-007advisorywatchguard.com/wgrd-psirt/advisory/wgsa-2024-00015