CVE-2024-6594 WatchGuard Firebox Single Sign-On Client Denial-of-Service

Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malformed commands. An attacker with network access to the client could create a denial of service condition for the Single Sign-On service by...

CVE-2024-6593

CVE-2024-6593 describes an Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) for Windows, affecting versions up to 12.10.2. The underlying issue allows an attacker with network access to execute restricted management commands, indicating a privi...

CVE-2024-6592 WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass

An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway aka Single Sign-On Agent on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to forge communications to affected...

CVE-2024-6592

CVE-2024-6592 affects WatchGuard Authentication Gateway (Single Sign-On Agent) on Windows and WatchGuard SSO Client on Windows and macOS. Root cause: incorrect authorization in the protocol communication between gateway and clients, enabling authentication bypass. Affected versions: Authenticatio...

CVE-2024-6592: Missing Authentication for Critical Function

An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway aka Single Sign-On Agent on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to forge communications to affected...

PT-2024-37744

Name of the Vulnerable Software and Affected Versions WatchGuard Single Sign-On Client versions through 12.7 Description The issue is related to improper handling of exceptional conditions in the WatchGuard Single Sign-On Client on Windows, causing the client to crash when handling malformed...

CVE-2024-6594: Improper Handling of Exceptional Conditions

Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malformed commands. An attacker with network access to the client could create a denial of service condition for the Single Sign-On service by...

CVE-2024-6593: Incorrect Authorization

Incorrect Authorization vulnerability in WatchGuard Authentication Gateway aka Single Sign-On Agent on Windows allows an attacker with network access to execute restricted management commands. An attacker that has already gained network access could exploit this vulnerability to retrieve...

PT-2024-6526

Name of the Vulnerable Software and Affected Versions: WatchGuard Authentication Gateway versions through 12.10.2 Windows Single Sign-On Client versions through 12.7 MacOS Single Sign-On Client versions through 12.5.4 Description: The issue is related to an Incorrect Authorization vulnerability i...

September 24, 2024—KB5043131 (OS Build 19045.4957) Preview

None None...

RHSA-2020:4932 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.3 security update on RHEL 8

Bulletin has no description...

RHSA-2020:4930 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.3 security update on RHEL 7

Bulletin has no description...

RHSA-2020:4929 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.3 security update on RHEL 6

Bulletin has no description...

RHSA-2021:0967 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.6 security update on RHEL 6

Bulletin has no description...

RHSA-2021:0968 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.6 security update on RHEL 7

Bulletin has no description...

RHSA-2021:0969 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.6 security update on RHEL 8

Bulletin has no description...

RHSA-2019:4042 Red Hat Security Advisory: Red Hat Single Sign-On 7.3.5 security update on RHEL 8

Bulletin has no description...

RHSA-2019:4041 Red Hat Security Advisory: Red Hat Single Sign-On 7.3.5 security update on RHEL 7

Bulletin has no description...

RHSA-2019:4040 Red Hat Security Advisory: Red Hat Single Sign-On 7.3.5 security update on RHEL 6

Bulletin has no description...

Important: Red Hat Security Advisory: Red Hat build of Keycloak 24.0.8 Update

New Red Hat build of Keycloak 24.0.8 packages with security impact Important are available from the Customer Portal Red Hat build of Keycloak 24.0.8 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobi...