watchguard-sso-client

Watchguard SSO Agent 취약점 개념 증명 CVE-2024-6592, CVE-2024-6593, CVE-2024-6594 자세한 내용은 다음 권고에서 확인할 수 있습니다: CVE-2024-6592 CVE-2024-6593 CVE-2024-6594 이 스크립트는 실행을 위해 Python click 라이브러리가 필요합니다. 예제 SSO 클라이언트에 임의 명령 실행 command 서브커맨드는 Watchguard SSO 클라이언트의 Telnet 인터페이스에 명령을 실행하는 데 사용할 수 있습니다. 예를 들어, 현재 로그인...

CVE-2020-5148

CVE-2020-5148 SonicWall UTM SSO エージェントにおける強制認証 Forced Authentication SonicWall SSO エージェントは、NetAPIデフォルトまたは WMI でワークステーションをプローブすることにより、特定の IP アドレスの背後にいるユーザーを識別します。NTLM 認証を開始する前にワークステーションを検証せず、セッションの存続中は同じアドレスへのポーリングを継続します。 SSO...

EUVD-2020-26395

Malware in sbrugna...

EUVD-2013-4662

Malware in sbrugna...

EUVD-2022-27846

Malicious code in bioql PyPI...

CVE-2022-22703

In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and PSK are contained in the log file of the .exe installer...

CVE-2024-6593 WatchGuard Firebox Single Sign-On Agent Management Interface Authentication Bypass

Incorrect Authorization vulnerability in WatchGuard Authentication Gateway aka Single Sign-On Agent on Windows allows an attacker with network access to execute restricted management commands. An attacker that has already gained network access could exploit this vulnerability to retrieve...

HPESBMU04626 rev.1 - HPE IceWall Products, Remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall Gen11 Enterprise Edition 11.0 Windows - IceWall Gen11 Agent only IceWall Gen11 Standard Edition 11.0 Windows - IceWall Gen11 Agent only IceWall SSO Agent Option 10.0...

SonicWall SSO Agent - Directory Services Connector MSI Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability in SonicWall Directory Services Connector Windows MSI client 4.1.21 and earlier versions allows a local low-privileged user to gain system privileges through running the recovery feature. SonicWall strongly advises SonicWall SSO Agent Directory Services...

K51213246: BIG-IP APM AD authentication vulnerability CVE-2021-23008

Security Advisory Description BIG-IP APM AD Active Directory authentication can be bypassed using a spoofed AS-REP Kerberos Authentication Service Response response sent over a hijacked KDC Kerberos Key Distribution Center connection, or from an AD server compromised by an attacker.CVE-2021-23008...

CVE-2022-22703

In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and PSK are contained in the log file of the .exe installer...

CVE-2022-22703

In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and PSK are contained in the log file of the .exe installer...

CVE-2022-22703

In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and PSK are contained in the log file of the .exe installer...

Default credentials

In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and PSK are contained in the log file of the .exe installer...

CVE-2022-22703

Stormshield SSO Agent 2.x (before 2.1.1) and 3.x (before 3.0.2) expose cleartext credentials because their installer .exe log files contain the user password and PSK. Root cause: sensitive data is written to log files during installation; impact is exposure of credentials via local logs. The prov...

CVE-2022-22703

In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and PSK are contained in the log file of the .exe installer...

CVE-2022-22703: Insertion of Sensitive Information into Log File

In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and PSK are contained in the log file of the .exe installer...

CVE-2020-5148

SonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network, this client probing method allows a potential attacker to capture the password hash of the privileged user and potentially forces the SSO Agent to authenticate allowing an attacker to bypass firewal...

Default configuration

SonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network, this client probing method allows a potential attacker to capture the password hash of the privileged user and potentially forces the SSO Agent to authenticate allowing an attacker to bypass firewal...

CVE-2020-5148

SonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network, this client probing method allows a potential attacker to capture the password hash of the privileged user and potentially forces the SSO Agent to authenticate allowing an attacker to bypass firewal...