CVE-2024-6593

Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows allows an attacker with network access to execute restricted management commands. An attacker that has already gained network access could exploit this vulnerability to retrieve authenticated usernames and group memberships from the Single Sign-On Agent or tamper with the agent configuration. This vulnerability cannot be used by an attacker to gain access to user credentials.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://psirt.watchguard.com/CVE-2024-6593
https://www.redteam-pentesting.de/advisories/rt-sa-2024-007
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00015	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:watchguard:authentication_gateway:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2024-09-25 12:15

Updated : 2026-08-08 00:16

NVD link : CVE-2024-6593

Mitre link : CVE-2024-6593

CVE.ORG link : CVE-2024-6593

JSON object : View

Products Affected

watchguard

authentication_gateway

CWE

CWE-863

Incorrect Authorization

{"id": "CVE-2024-6593", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-6593", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2024-09-25T13:49:03.707588Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "affectedData": [{"vendor": "WatchGuard", "product": "SSO Agent", "versions": [{"status": "affected", "version": "12.0", "versionType": "semver", "lessThanOrEqual": "12.10.2"}], "defaultStatus": "unaffected"}]}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "affectedData": [{"cpes": ["cpe:2.3:a:watchguard:authentication_gateway:*:*:*:*:*:*:*:*"], "vendor": "watchguard", "product": "authentication_gateway", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "12.10.2"}], "defaultStatus": "unaffected"}]}], "published": "2024-09-25T12:15:05.217", "references": [{"url": "https://psirt.watchguard.com/CVE-2024-6593", "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3"}, {"url": "https://www.redteam-pentesting.de/advisories/rt-sa-2024-007", "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3"}, {"url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00015", "tags": ["Vendor Advisory"], "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "description": [{"lang": "en", "value": "CWE-863"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows allows an attacker with network access to execute restricted management commands.\n\nAn attacker that has already gained network access could exploit this vulnerability to retrieve authenticated usernames and group memberships from the Single Sign-On Agent or tamper with the agent configuration. This vulnerability cannot be used by an attacker to gain access to user credentials."}, {"lang": "es", "value": "La vulnerabilidad de autorizaci\u00f3n incorrecta en WatchGuard Authentication Gateway (tambi\u00e9n conocido como Single Sign-On Agent) en Windows permite que un atacante con acceso a la red ejecute comandos de administraci\u00f3n restringidos. Este problema afecta a Authentication Gateway: hasta la versi\u00f3n 12.10.2."}], "lastModified": "2026-08-08T00:16:33.413", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:watchguard:authentication_gateway:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7CF4A96-DAAE-4DBE-A2CF-EED3B73D7CF9", "versionEndIncluding": "12.10.2"}], "operator": "OR"}]}], "sourceIdentifier": "5d1c2695-1a31-4499-88ae-e847036fd7e3"}