THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2024-6592 (CRITICAL 9.1) — An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to forge communications

[NVD] CVE-2024-6592 (CRITICAL 9.1) — An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to forge communications

lownvdPublished 2024-09-25

CVE-2024-6592 CVSS: 9.1 CRITICAL Published: 2024-09-25T12:15:05.027

An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to forge communications to affected components.

In the event an attacker h

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

CVE-2024-6592cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2024-6592