Incorrect Authorization in WatchGuard Authentication Gateway on Windows

CVE-2024-6593

Summary

An incorrect authorization vulnerability exists in WatchGuard Authentication Gateway (commonly known as the Single Sign-On Agent) for Windows, which allows a malicious actor with network access to execute restricted management commands. This flaw poses a significant risk to system integrity and security as attackers can exploit it to manipulate critical configuration settings and gain unauthorized control over the system. The affected versions include Authentication Gateway through 12.10.2, highlighting the importance of prompt updates to safeguard against potential exploitation.

References