Authentication Gateway
Approved changes feed: RSS · Atom
cpe:2.3:a:watchguard:authentication_gateway:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Watchguard (ec468727-86da-5bb0-9483-b62749e25478) |
|---|---|
| Product | Authentication Gateway (eb8e40aa-cec0-52c4-8f7f-d0c5daca1d19) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6593 |
vulnerable | 2026-06-08 06:58:19.965550 |
WatchGuard Firebox Single Sign-On Agent Management Interface Authentication Bypass
Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows allows an attacker with network access to execute restricted management commands.
An attacker that has already gained network access could exploit this vulnerability to retrieve authenticated usernames and group memberships from the Single Sign-On Agent or tamper with the agent configuration. This vulnerability cannot be used by an attacker to gain access to user credentials.
Published: 2024-09-25T11:16:15.822Z
Updated: 2026-08-07T23:42:01.345Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6592 |
vulnerable | 2026-06-08 06:58:19.962623 |
WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass
An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to forge communications to affected components.
In the event an attacker has already gained network access, they could exploit this vulnerability to retrieve authenticated usernames and group memberships from the Single Sign-On Agent or send arbitrary account and group information to the Single Sign-On Agent for their host. This vulnerability cannot be used by an attacker to gain access to user credentials.
Published: 2024-09-25T11:16:01.320Z
Updated: 2026-08-07T23:46:43.531Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.