CVE-2024-6592

Name of the Vulnerable Software and Affected Versions: WatchGuard Authentication Gateway versions through 12.10.2 Windows Single Sign-On Client versions through 12.7 MacOS Single Sign-On Client versions through 12.5.4

Description: The issue is related to an Incorrect Authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway and the WatchGuard Single Sign-On Client. This vulnerability allows Authentication Bypass. The vulnerability can be exploited by a remote attacker to gain unauthorized access.

Recommendations: For WatchGuard Authentication Gateway versions through 12.10.2, update to a newer version to secure systems from attack. For Windows Single Sign-On Client versions through 12.7, update to a newer version to secure systems from attack. For MacOS Single Sign-On Client versions through 12.5.4, update to a newer version to secure systems from attack. As a temporary workaround, consider enabling Multi-Factor Authentication (MFA) and monitor for signs of compromise.