CVE-2024-6592

CVE-2024-6592 affects WatchGuard Authentication Gateway (Single Sign-On Agent) on Windows and WatchGuard SSO Client on Windows and macOS. Root cause: incorrect authorization in the protocol communication between gateway and clients, enabling authentication bypass. Affected versions: Authenticatio...

CVE-2024-7491

The CVE-2024-7491 entry concerns HUSKY – Products Filter Professional for WooCommerce for WordPress. It is an Insecure Direct Object Reference via the woof_messenger_remove_subscr AJAX action, caused by missing validation on the user-controlled key. Affected versions are up to and including 1.3.6...

CVE-2024-7491 HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.1 - Insecure Direct Object Reference to Unsubscribe

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.6.1 via the woofmessengerremovesubscr AJAX action due to missing validation on the 'key' user controlled key. This makes it...

CVE-2024-6592: Missing Authentication for Critical Function

An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway aka Single Sign-On Agent on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to forge communications to affected...

PT-2024-37744

Name of the Vulnerable Software and Affected Versions WatchGuard Single Sign-On Client versions through 12.7 Description The issue is related to improper handling of exceptional conditions in the WatchGuard Single Sign-On Client on Windows, causing the client to crash when handling malformed...

PT-2024-6526

Name of the Vulnerable Software and Affected Versions: WatchGuard Authentication Gateway versions through 12.10.2 Windows Single Sign-On Client versions through 12.7 MacOS Single Sign-On Client versions through 12.5.4 Description: The issue is related to an Incorrect Authorization vulnerability i...

CVE-2024-6593: Incorrect Authorization

Incorrect Authorization vulnerability in WatchGuard Authentication Gateway aka Single Sign-On Agent on Windows allows an attacker with network access to execute restricted management commands. An attacker that has already gained network access could exploit this vulnerability to retrieve...

CVE-2024-6594: Improper Handling of Exceptional Conditions

Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malformed commands. An attacker with network access to the client could create a denial of service condition for the Single Sign-On service by...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.0.0), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (3.0.0) +863 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.3.10.release)

org.springframework:spring-web MAVEN version 4.3.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 3.0.0 -...

September 24, 2024—KB5043131 (OS Build 19045.4957) Preview

None None...

RHSA-2020:4932 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.3 security update on RHEL 8

Bulletin has no description...

RHSA-2020:4930 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.3 security update on RHEL 7

Bulletin has no description...

RHSA-2020:4929 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.3 security update on RHEL 6

Bulletin has no description...

RHSA-2021:0967 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.6 security update on RHEL 6

Bulletin has no description...

RHSA-2021:0968 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.6 security update on RHEL 7

Bulletin has no description...

RHSA-2021:0969 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.6 security update on RHEL 8

Bulletin has no description...

RHSA-2019:4042 Red Hat Security Advisory: Red Hat Single Sign-On 7.3.5 security update on RHEL 8

Bulletin has no description...

RHSA-2019:4041 Red Hat Security Advisory: Red Hat Single Sign-On 7.3.5 security update on RHEL 7

Bulletin has no description...

RHSA-2019:4040 Red Hat Security Advisory: Red Hat Single Sign-On 7.3.5 security update on RHEL 6

Bulletin has no description...

Important: Red Hat Security Advisory: Red Hat build of Keycloak 24.0.8 Update

New Red Hat build of Keycloak 24.0.8 packages with security impact Important are available from the Customer Portal Red Hat build of Keycloak 24.0.8 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobi...