CVE-2024-6593
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
An Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (Single Sign-On Agent) on Windows allows an attacker with network access to execute restricted management commands.
Risk Assessment
An attacker could retrieve authenticated usernames and group memberships from the SSO Agent or tamper with the agent configuration. Cannot gain access to user credentials.
Recommendation
Install WatchGuard updates for the SSO Agent. Restrict network access to the agent and monitor for unusual activity.
Original NVD description (English source)
Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows allows an attacker with network access to execute restricted management commands. An attacker that has already gained network access could exploit this vulnerability to retrieve authenticated usernames and group memberships from the Single Sign-On Agent or tamper with the agent configuration. This vulnerability cannot be used by an attacker to gain access to user credentials.