Single Sign On Client
Monthly
WatchGuard Single Sign-On Client on Windows crashes when processing malformed commands, allowing unauthenticated network-adjacent attackers to repeatedly trigger service crashes and maintain a sustained denial of service against the SSO authentication service. All versions through 12.7 are affected per vendor-confirmed CPE data. No public exploit identified at time of analysis, and an EPSS of 0.50% (39th percentile) indicates low observed exploitation probability despite the high CVSS 4.0 score of 8.7 driven by its unauthenticated network vector.
Authentication bypass in WatchGuard's Single Sign-On stack lets remote unauthenticated attackers subvert the protocol communication between the Authentication Gateway (SSO Agent) on Windows and the SSO Clients on Windows/macOS, allowing an attacker to be authenticated as another user. The flaw stems from an incorrect authorization check (CWE-306) in the agent-to-client protocol and carries a CVSS 4.0 base score of 9.3. No CISA KEV listing indicates active exploitation, but independent technical exploitation details are publicly documented in the RedTeam Pentesting advisory rt-sa-2024-006, while the EPSS probability remains modest at 1.03% (60th percentile).
@dcl/single-sign-on-client is an open source npm library which deals with single sign on authentication flows. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
WatchGuard Single Sign-On Client on Windows crashes when processing malformed commands, allowing unauthenticated network-adjacent attackers to repeatedly trigger service crashes and maintain a sustained denial of service against the SSO authentication service. All versions through 12.7 are affected per vendor-confirmed CPE data. No public exploit identified at time of analysis, and an EPSS of 0.50% (39th percentile) indicates low observed exploitation probability despite the high CVSS 4.0 score of 8.7 driven by its unauthenticated network vector.
Authentication bypass in WatchGuard's Single Sign-On stack lets remote unauthenticated attackers subvert the protocol communication between the Authentication Gateway (SSO Agent) on Windows and the SSO Clients on Windows/macOS, allowing an attacker to be authenticated as another user. The flaw stems from an incorrect authorization check (CWE-306) in the agent-to-client protocol and carries a CVSS 4.0 base score of 9.3. No CISA KEV listing indicates active exploitation, but independent technical exploitation details are publicly documented in the RedTeam Pentesting advisory rt-sa-2024-006, while the EPSS probability remains modest at 1.03% (60th percentile).
@dcl/single-sign-on-client is an open source npm library which deals with single sign on authentication flows. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.