CVE-2024-6592: WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass
An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to forge communications to affected components.
In the event an attacker has already gained network access, they could exploit this vulnerability to retrieve authenticated usernames and group memberships from the Single Sign-On Agent or send arbitrary account and group information to the Single Sign-On Agent for their host. This vulnerability cannot be used by an attacker to gain access to user credentials.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6592?
CVE-2024-6592 is classified as a high severity vulnerability due to its potential for authentication bypass.
How do I fix CVE-2024-6592?
To fix CVE-2024-6592, update your WatchGuard Authentication Gateway to version 12.10.3 or later and the Single Sign-On Client to version 12.5.5 for MacOS and 12.7.1 for Windows.
Which products are affected by CVE-2024-6592?
CVE-2024-6592 affects the WatchGuard Authentication Gateway versions up to 12.10.2, and the Single Sign-On Clients for Windows and MacOS up to versions 12.7 and 12.5.4 respectively.
What type of vulnerability is CVE-2024-6592?
CVE-2024-6592 is an Incorrect Authorization vulnerability that allows for authentication bypass in the communication between WatchGuard components.
Is there a workaround for CVE-2024-6592?
There is no official workaround for CVE-2024-6592; updating to the latest versions is the recommended mitigation.