CVE-2024-6592

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-6592", "assignerOrgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "state": "PUBLISHED", "assignerShortName": "WatchGuard", "dateReserved": "2024-07-09T02:09:02.539Z", "datePublished": "2024-09-25T11:16:01.320Z", "dateUpdated": "2026-08-07T23:46:43.531Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "shortName": "WatchGuard", "dateUpdated": "2026-08-07T23:46:43.531Z"}, "title": "WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass", "descriptions": [{"lang": "en", "value": "An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to forge communications to affected components.\n\nIn the event an attacker has already gained network access, they could exploit this vulnerability to retrieve authenticated usernames and group memberships from the Single Sign-On Agent or send arbitrary account and group information to the Single Sign-On Agent for their host. This vulnerability cannot be used by an attacker to gain access to user credentials."}], "affected": [{"vendor": "WatchGuard", "product": "SSO Client", "versions": [{"status": "affected", "version": "12.0", "versionType": "semver", "lessThanOrEqual": "12.7"}], "defaultStatus": "unaffected", "platforms": ["Windows"]}, {"vendor": "WatchGuard", "product": "SSO Client", "versions": [{"status": "affected", "version": "12.0", "versionType": "semver", "lessThanOrEqual": "12.5.4"}], "defaultStatus": "unaffected", "platforms": ["macOS"]}, {"vendor": "WatchGuard", "product": "SSO Agent", "versions": [{"status": "affected", "version": "12.0", "versionType": "semver", "lessThanOrEqual": "12.10.2"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.redteam-pentesting.de/advisories/rt-sa-2024-006", "tags": ["technical-description"]}, {"url": "https://psirt.watchguard.com/CVE-2024-6592", "tags": ["vendor-advisory"]}, {"url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00014", "tags": ["vendor-advisory"]}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:watchguard:sso_client:*:*:*:*:*:*:*:*", "versionStartIncluding": "12.0", "versionEndIncluding": "12.5.4"}, {"vulnerable": true, "criteria": "cpe:2.3:a:watchguard:sso_client:*:*:*:*:*:*:*:*", "versionStartIncluding": "12.0", "versionEndIncluding": "12.7"}, {"vulnerable": true, "criteria": "cpe:2.3:a:watchguard:sso_agent:*:*:*:*:*:*:*:*", "versionStartIncluding": "12.0", "versionEndIncluding": "12.10.2"}]}]}], "metrics": [{"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "baseScore": 9.3, "baseSeverity": "CRITICAL"}}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-306", "type": "CWE", "cweId": "CWE-306"}]}], "workarounds": [{"lang": "en", "value": "An attacker must have already established network access to exploit this vulnerability. WatchGuard recommends using Windows Firewall rules to restrict TCP port 4116 network access to the Single Sign-On Client to only allow connections from the Authentication Gateway (SSO Agent), and restricting TCP port 4114 network access to the Authentication Gateway to only allow connections from the Firebox. Windows administrators can use Group Policy objects to add Windows firewall rules to their endpoints."}], "exploits": [{"lang": "en", "value": "WatchGuard is not aware of any exploitation of this vulnerability in the wild."}], "datePublic": "2024-09-25T11:16:01.320Z"}, "adp": [{"affected": [{"vendor": "watchguard", "product": "authentication_gateway", "cpes": ["cpe:2.3:a:watchguard:authentication_gateway:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "0", "status": "affected", "lessThan": "12.10.2", "versionType": "semver"}]}, {"vendor": "watchguard", "product": "single_sign-on_client", "cpes": ["cpe:2.3:a:watchguard:single_sign-on_client:*:*:*:*:*:windows:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "12.7", "versionType": "semver"}]}, {"vendor": "watchguard", "product": "single_sign-on_client", "cpes": ["cpe:2.3:a:watchguard:single_sign-on_client:*:*:*:*:*:macos:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "12.5.4", "versionType": "semver"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-09-25T13:54:19.684697Z", "id": "CVE-2024-6592", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-25T14:29:12.827Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-6592", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-25T13:54:19.684697Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:watchguard:authentication_gateway:*:*:*:*:*:*:*:*"], "vendor": "watchguard", "product": "authentication_gateway", "versions": [{"status": "affected", "version": "0", "lessThan": "12.10.2", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:watchguard:single_sign-on_client:*:*:*:*:*:windows:*:*"], "vendor": "watchguard", "product": "single_sign-on_client", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "12.7"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:watchguard:single_sign-on_client:*:*:*:*:*:macos:*:*"], "vendor": "watchguard", "product": "single_sign-on_client", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "12.5.4"}], "defaultStatus": "unaffected"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-25T14:29:06.233Z"}}], "cna": {"title": "WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass", "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 9.3, "baseSeverity": "CRITICAL", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}}], "affected": [{"vendor": "WatchGuard", "product": "SSO Client", "versions": [{"status": "affected", "version": "12.0", "versionType": "semver", "lessThanOrEqual": "12.7"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}, {"vendor": "WatchGuard", "product": "SSO Client", "versions": [{"status": "affected", "version": "12.0", "versionType": "semver", "lessThanOrEqual": "12.5.4"}], "platforms": ["macOS"], "defaultStatus": "unaffected"}, {"vendor": "WatchGuard", "product": "SSO Agent", "versions": [{"status": "affected", "version": "12.0", "versionType": "semver", "lessThanOrEqual": "12.10.2"}], "defaultStatus": "unaffected"}], "exploits": [{"lang": "en", "value": "WatchGuard is not aware of any exploitation of this vulnerability in the wild."}], "datePublic": "2024-09-25T11:16:01.320Z", "references": [{"url": "https://www.redteam-pentesting.de/advisories/rt-sa-2024-006", "tags": ["technical-description"]}, {"url": "https://psirt.watchguard.com/CVE-2024-6592", "tags": ["vendor-advisory"]}, {"url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00014", "tags": ["vendor-advisory"]}], "workarounds": [{"lang": "en", "value": "An attacker must have already established network access to exploit this vulnerability. WatchGuard recommends using Windows Firewall rules to restrict TCP port 4116 network access to the Single Sign-On Client to only allow connections from the Authentication Gateway (SSO Agent), and restricting TCP port 4114 network access to the Authentication Gateway to only allow connections from the Firebox. Windows administrators can use Group Policy objects to add Windows firewall rules to their endpoints."}], "descriptions": [{"lang": "en", "value": "An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to forge communications to affected components.\n\nIn the event an attacker has already gained network access, they could exploit this vulnerability to retrieve authenticated usernames and group memberships from the Single Sign-On Agent or send arbitrary account and group information to the Single Sign-On Agent for their host. This vulnerability cannot be used by an attacker to gain access to user credentials."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:watchguard:sso_client:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "12.5.4", "versionStartIncluding": "12.0"}, {"criteria": "cpe:2.3:a:watchguard:sso_client:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "12.7", "versionStartIncluding": "12.0"}, {"criteria": "cpe:2.3:a:watchguard:sso_agent:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "12.10.2", "versionStartIncluding": "12.0"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "shortName": "WatchGuard", "dateUpdated": "2026-08-07T23:46:43.531Z"}}}, "cveMetadata": {"cveId": "CVE-2024-6592", "state": "PUBLISHED", "dateUpdated": "2026-08-07T23:46:43.531Z", "dateReserved": "2024-07-09T02:09:02.539Z", "assignerOrgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "datePublished": "2024-09-25T11:16:01.320Z", "assignerShortName": "WatchGuard"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Windows"], "product": "SSO Client", "vendor": "WatchGuard", "versions": [{"lessThanOrEqual": "12.7", "status": "affected", "version": "12.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "platforms": ["macOS"], "product": "SSO Client", "vendor": "WatchGuard", "versions": [{"lessThanOrEqual": "12.5.4", "status": "affected", "version": "12.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "SSO Agent", "vendor": "WatchGuard", "versions": [{"lessThanOrEqual": "12.10.2", "status": "affected", "version": "12.0", "versionType": "semver"}]}], "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3"}, {"affectedData": [{"cpes": ["cpe:2.3:a:watchguard:authentication_gateway:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "authentication_gateway", "vendor": "watchguard", "versions": [{"lessThan": "12.10.2", "status": "affected", "version": "0", "versionType": "semver"}]}, {"cpes": ["cpe:2.3:a:watchguard:single_sign-on_client:*:*:*:*:*:windows:*:*"], "defaultStatus": "unaffected", "product": "single_sign-on_client", "vendor": "watchguard", "versions": [{"lessThanOrEqual": "12.7", "status": "affected", "version": "0", "versionType": "semver"}]}, {"cpes": ["cpe:2.3:a:watchguard:single_sign-on_client:*:*:*:*:*:macos:*:*"], "defaultStatus": "unaffected", "product": "single_sign-on_client", "vendor": "watchguard", "versions": [{"lessThanOrEqual": "12.5.4", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:watchguard:authentication_gateway:*:*:*:*:*:*:*:*", "matchCriteriaId": "B7CF4A96-DAAE-4DBE-A2CF-EED3B73D7CF9", "versionEndIncluding": "12.10.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:watchguard:single_sign-on_client:*:*:*:*:*:macos:*:*", "matchCriteriaId": "44B3732D-253E-46C6-98F7-661AB40126BB", "versionEndIncluding": "12.5.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:watchguard:single_sign-on_client:*:*:*:*:*:windows:*:*", "matchCriteriaId": "17A19E9E-0672-4673-BD4F-681E4C994EE7", "versionEndIncluding": "12.7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to forge communications to affected components.\n\nIn the event an attacker has already gained network access, they could exploit this vulnerability to retrieve authenticated usernames and group memberships from the Single Sign-On Agent or send arbitrary account and group information to the Single Sign-On Agent for their host. This vulnerability cannot be used by an attacker to gain access to user credentials."}, {"lang": "es", "value": "La vulnerabilidad de autorizaci\u00f3n incorrecta en la comunicaci\u00f3n de protocolo entre WatchGuard Authentication Gateway (tambi\u00e9n conocido como Single Sign-On Agent) en Windows y WatchGuard Single Sign-On Client en Windows y MacOS permite la omisi\u00f3n de la autenticaci\u00f3n. Este problema afecta a Authentication Gateway: hasta la versi\u00f3n 12.10.2; Windows Single Sign-On Client: hasta la versi\u00f3n 12.7; MacOS Single Sign-On Client: hasta la versi\u00f3n 12.5.4."}], "id": "CVE-2024-6592", "lastModified": "2026-08-08T00:16:33.227", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-6592", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2024-09-25T13:54:19.684697Z", "version": "2.0.3"}}]}, "published": "2024-09-25T12:15:05.027", "references": [{"source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "url": "https://psirt.watchguard.com/CVE-2024-6592"}, {"source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "url": "https://www.redteam-pentesting.de/advisories/rt-sa-2024-006"}, {"source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00014"}], "sourceIdentifier": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-863"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}