Authentication Gateway
Monthly
Improper authorization in WatchGuard's Authentication Gateway (Single Sign-On Agent) on Windows lets a network-based attacker invoke restricted management commands that should be gated behind authorization checks, affecting all versions through 12.10.2. Per the CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:N), exploitation is remote, low-complexity, and requires no authentication or user interaction, yielding high confidentiality and integrity impact. There is no public exploit identified at time of analysis, though an independent RedTeam Pentesting advisory documenting the flaw exists; EPSS is a modest 0.52% (40th percentile), indicating no broad automated exploitation observed yet.
Authentication bypass in WatchGuard's Single Sign-On stack lets remote unauthenticated attackers subvert the protocol communication between the Authentication Gateway (SSO Agent) on Windows and the SSO Clients on Windows/macOS, allowing an attacker to be authenticated as another user. The flaw stems from an incorrect authorization check (CWE-306) in the agent-to-client protocol and carries a CVSS 4.0 base score of 9.3. No CISA KEV listing indicates active exploitation, but independent technical exploitation details are publicly documented in the RedTeam Pentesting advisory rt-sa-2024-006, while the EPSS probability remains modest at 1.03% (60th percentile).
Improper authorization in WatchGuard's Authentication Gateway (Single Sign-On Agent) on Windows lets a network-based attacker invoke restricted management commands that should be gated behind authorization checks, affecting all versions through 12.10.2. Per the CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:N), exploitation is remote, low-complexity, and requires no authentication or user interaction, yielding high confidentiality and integrity impact. There is no public exploit identified at time of analysis, though an independent RedTeam Pentesting advisory documenting the flaw exists; EPSS is a modest 0.52% (40th percentile), indicating no broad automated exploitation observed yet.
Authentication bypass in WatchGuard's Single Sign-On stack lets remote unauthenticated attackers subvert the protocol communication between the Authentication Gateway (SSO Agent) on Windows and the SSO Clients on Windows/macOS, allowing an attacker to be authenticated as another user. The flaw stems from an incorrect authorization check (CWE-306) in the agent-to-client protocol and carries a CVSS 4.0 base score of 9.3. No CISA KEV listing indicates active exploitation, but independent technical exploitation details are publicly documented in the RedTeam Pentesting advisory rt-sa-2024-006, while the EPSS probability remains modest at 1.03% (60th percentile).