{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2024-6592",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2024-6592",
    "idYear": 2024,
    "status": "PUBLISHED",
    "publishedAt": "2024-09-25T11:16:01.320Z",
    "updatedAt": "2026-08-07T23:46:43.531Z",
    "importedAt": "2026-10-24T01:57:20.494Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass",
      "summary": "An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to forge communications to affected components.\n\nIn the event an attacker has already gained network access, they could exploit this vulnerability to retrieve authenticated usernames and group memberships from the Single Sign-On Agent or send arbitrary account and group information to the Single Sign-On Agent for their host. This vulnerability cannot be used by an attacker to gain access to user credentials.",
      "affected": [
        {
          "vendor": "WatchGuard",
          "product": "SSO Client",
          "platforms": [
            "Windows"
          ],
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "12.0",
              "status": "affected",
              "versionType": "semver",
              "lessThanOrEqual": "12.7"
            }
          ]
        },
        {
          "vendor": "WatchGuard",
          "product": "SSO Client",
          "platforms": [
            "macOS"
          ],
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "12.0",
              "status": "affected",
              "versionType": "semver",
              "lessThanOrEqual": "12.5.4"
            }
          ]
        },
        {
          "vendor": "WatchGuard",
          "product": "SSO Agent",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "12.0",
              "status": "affected",
              "versionType": "semver",
              "lessThanOrEqual": "12.10.2"
            }
          ]
        }
      ]
    }
  }
}