Description
Incorrect Authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows Authentication Bypass.This issue affects the Authentication Gateway: through 12.10.2; Windows Single Sign-On Client: through 12.7; MacOS Single Sign-On Client: through 12.5.4.
Published: 2024-09-25
Score: 9.1 Critical
EPSS: 2.5% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-47657 Incorrect Authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows Authentication Bypass.This issue affects the Authentication Gateway: through 12.10.2; Windows Single Sign-On Client: through 12.7; MacOS Single Sign-On Client: through 12.5.4.
History

Wed, 15 Oct 2025 18:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-306

Sat, 12 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.01273}

 epss

{'score': 0.01378}

Wed, 25 Sep 2024 15:30:00 +0000

Type Values Removed Values Added
First Time appeared Watchguard
Watchguard authentication Gateway
Watchguard single Sign-on Client
CPEs cpe:2.3:a:watchguard:authentication_gateway:*:*:*:*:*:*:*:*
cpe:2.3:a:watchguard:single_sign-on_client:*:*:*:*:*:macos:*:*
cpe:2.3:a:watchguard:single_sign-on_client:*:*:*:*:*:windows:*:*
Vendors & Products Watchguard
Watchguard authentication Gateway
Watchguard single Sign-on Client
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 25 Sep 2024 11:30:00 +0000

Type Values Removed Values Added
Description Incorrect Authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows Authentication Bypass.This issue affects the Authentication Gateway: through 12.10.2; Windows Single Sign-On Client: through 12.7; MacOS Single Sign-On Client: through 12.5.4.
Title WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass
Weaknesses CWE-863
References
Metrics cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N'}

Subscriptions

Watchguard Authentication Gateway Single Sign-on Client
cve-icon MITRE

Status: PUBLISHED

Assigner: WatchGuard

Published:

Updated: 2025-10-15T17:57:05.727Z

Reserved: 2024-07-09T02:09:02.539Z

Link: CVE-2024-6592

cve-icon Vulnrichment

Updated: 2024-09-25T14:29:06.233Z

cve-icon NVD

Status : Modified

Published: 2024-09-25T12:15:05.027

Modified: 2025-10-15T18:15:33.913

Link: CVE-2024-6592

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses