Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b5aa0222-1e70-4c06-860f-77643da4356c?source=cve - https://plugins.trac.wordpress.org/browser/intelligence/trunk/vendor/levelten/intel/realtime/index.php - https://plugins.trac.wordpress.org/browser/intelligence/trunk/vendor/levelten/intel/realtime/settings.php#L12
CVE ID: CVE-2024-6574 State: PUBLISHED Published: 2024-07-13T05:38:08.141Z Last Updated: 2024-08-01T21:41:03.820Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: stijnvanderree Products: Laposta Problem Types: CWE-200 Information Exposure Description: The Laposta plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.12. This is due to the plugin not preventing direct access to several test files. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulne
, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. This plugin is no longer being maintained and has been closed for downloads. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7632fe73-4011-4e6e-8ce7-38a9359ac259?source=cve - https://plugins.trac.wordpress.org/browser/laposta/trunk/includes/laposta-php-1.2/examples/member/all.php
CVE ID: CVE-2024-6575 State: PUBLISHED Published: 2024-08-20T03:21:10.029Z Last Updated: 2024-08-20T13:36:52.081Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: posimyththemes Products: The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce Problem Types: CWE-79 Description: The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘res_width_value’ parameter within the plugin's tp_page_scroll widget in all versions up to, and including, 5.6.2 due to insufficient input sanitization and output escapi
_page_scroll widget in all versions up to, and including, 5.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/71d8a8cf-4653-4515-95ce-8d71697e189c?source=cve - https://plugins.trac.wordpress.org/browser/the-plus-addons-for-elementor-page-builder/trunk/modules/widgets/tp_page_scroll.php#L1017 - https://wordpress.org/plugins/the-plus-addons-for-elementor-page-builder/
unk/modules/widgets/tp_page_scroll.php#L1017 - https://wordpress.org/plugins/the-plus-addons-for-elementor-page-builder/#developers - https://plugins.trac.wordpress.org/changeset/3136509/
CVE ID: CVE-2024-6576 State: PUBLISHED Published: 2024-07-29T13:46:32.409Z Last Updated: 2024-08-01T21:41:03.876Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: Progress Products: MOVEit Transfer Problem Types: CWE-287 Description: Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Privilege Escalation.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.12, from 2023.1.0 before 2023.1.7, from 2024.0.0 before 2024.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.progress.com/moveit - https://community.progress.com/s/article/MOVEit-Transfer-Product-Sec
er: References: - https://www.progress.com/moveit - https://community.progress.com/s/article/MOVEit-Transfer-Product-Security-Alert-Bulletin-July-2024-CVE-2024-6576
CVE ID: CVE-2024-6577 State: PUBLISHED Published: 2025-03-20T10:10:36.761Z Last Updated: 2025-03-20T18:19:07.501Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: pytorch Products: pytorch/serve Problem Types: CWE-840 Description: In the latest version of pytorch/serve, the script 'upload_results_to_s3.sh' references the S3 bucket 'benchmarkai-metrics-prod' without ensuring its ownership or confirming its accessibility. This could lead to potential security vulnerabilities or unauthorized access to the bucket if it is not properly secured or claimed by the appropriate entity. The issue may result in data breaches, exposure of proprietary information, or unaut
claimed by the appropriate entity. The issue may result in data breaches, exposure of proprietary information, or unauthorized modifications to stored data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/20917570-8328-428f-bd1d-4fcd71fb2359
CVE ID: CVE-2024-6578 State: PUBLISHED Published: 2024-07-29T18:37:16.820Z Last Updated: 2024-08-01T21:41:03.725Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: aimhubio Products: aimhubio/aim Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from the improper neutralization of input during web page generation, specifically in the logs-tab for runs. The terminal output logs are displayed using the `dangerouslySetInnerHTML` function in React, which is susceptible to XSS attacks. An attacker can exploit this vulnerability by injecting malicious scripts into the lo
ich is susceptible to XSS attacks. An attacker can exploit this vulnerability by injecting malicious scripts into the logs, which will be executed when a user views the logs-tab. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/5b1ebc67-5346-44aa-b8b8-3c1c09d79680
CVE ID: CVE-2024-6579 State: PUBLISHED Published: 2024-07-16T09:32:12.232Z Last Updated: 2024-08-01T21:41:04.047Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: genetechproducts Products: Web and WooCommerce Addons for WPBakery Builder Problem Types: CWE-862 Missing Authorization Description: The Web and WooCommerce Addons for WPBakery Builder plugin for WordPress is vulnerable to unauthorized plugin settings modification due to a missing capability check on several plugin functions in all versions up to, and including, 1.4.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change some of the plugin settings. A
t possible for authenticated attackers, with Subscriber-level access and above, to change some of the plugin settings. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/746b77c9-64f8-43e8-9c2a-ce6bc35fd24c?source=cve - https://plugins.trac.wordpress.org/browser/vc-addons-by-bit14/tags/1.4.5/bit14-vc-addons.php#L102 - https://plugins.trac.wordpress.org/browser/vc-addons-by-bit14/tags/1.4.5/bit14-vc-addons.php#L114 - https://plugins.trac.wordpress.org/browser/vc-addons-by-bit14/tags/1.4.5/bit14-vc-addons.php#L125
CVE ID: CVE-2024-6580 State: PUBLISHED Published: 2024-07-08T18:55:10.323Z Last Updated: 2024-08-01T21:41:03.926Z Vendors: /n software Products: IPWorks SSH SFTPServer Problem Types: CWE-1390 Description: The /n software IPWorks SSH library SFTPServer component can be induced to make unintended filesystem or network path requests when loading a SSH public key or certificate. To be exploitable, an application calling the SFTPServer component must grant user access without verifying the SSH public key or certificate (which would most likely be a separate vulnerability in the calling application). IPWorks SSH versions 22.0.8945 and 24.0.8945 were released to address this condition by blocking a
calling application). IPWorks SSH versions 22.0.8945 and 24.0.8945 were released to address this condition by blocking all filesystem and network path requests for SSH public keys or certificates. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.nsoftware.com/kb/articles/cve-2024-5806
CVE ID: CVE-2024-6581 State: PUBLISHED Published: 2024-10-29T12:49:01.555Z Last Updated: 2024-10-29T13:24:02.586Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: parisneo Products: parisneo/lollms Problem Types: CWE-79 Description: A vulnerability in the discussion image upload function of the Lollms application, version v9.9, allows for the uploading of SVG files. Due to incomplete filtering in the sanitize_svg function, this can lead to cross-site scripting (XSS) vulnerabilities, which in turn pose a risk of remote code execution. The sanitize_svg function only removes script elements and 'on*' event attributes, but does not account for other potential vec
itize_svg function only removes script elements and 'on*' event attributes, but does not account for other potential vectors for XSS within SVG files. This vulnerability can be exploited when authorized users access a malicious URL containing the crafted SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/ad68ecd6-44e2-449b-8e7e-f2b71b1b43c7 - https://github.com/parisneo/lollms/commit/328b960a0de2097e13654ac752253e9541521ddd
CVE ID: CVE-2024-6582 State: PUBLISHED Published: 2024-09-13T16:11:39.817Z Last Updated: 2024-11-03T18:27:25.362Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-306 Description: A broken access control vulnerability exists in the latest version of lunary-ai/lunary. The `saml.ts` file allows a user from one organization to update the Identity Provider (IDP) settings and view the SSO metadata of another organization. This vulnerability can lead to unauthorized access and potential account takeover if the email of a user in the target organization is known. Additional Analyst Notes: - CISA ADP Vulnrichmen
nt takeover if the email of a user in the target organization is known. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/251d138c-3911-4a81-96e5-5a4ab59a0b59 - https://github.com/lunary-ai/lunary/commit/1f043d8798ad87346dfe378eea723bff78ad7433
CVE ID: CVE-2024-6583 State: PUBLISHED Published: 2025-03-20T10:10:23.071Z Last Updated: 2025-03-20T18:22:17.747Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: stangirard Products: stangirard/quivr Problem Types: CWE-23 Description: A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/c310b500-ec26-4121-8d3a-8e863181346f
CVE ID: CVE-2024-6584 State: PUBLISHED Published: 2025-05-15T20:07:07.826Z Last Updated: 2025-05-17T03:44:48.193Z Vendors: Unknown Products: Jetpack Boost Problem Types: CWE-918 Server-Side Request Forgery (SSRF) Description: The 'wp_ajax_boost_proxy_ig' action allows administrators to make GET requests to arbitrary URLs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/eaa57c8c-1cac-4903-9763-79f7f84469fa/
CVE ID: CVE-2024-6585 State: PUBLISHED Published: 2024-08-30T22:17:28.565Z Last Updated: 2024-09-03T14:52:05.350Z Vendors: Lightdash Products: Lightdash Problem Types: CWE-79 Description: Multiple stored cross-site scripting (“XSS”) vulnerabilities in the markdown dashboard and dashboard comment functionality of Lightdash version 0.1024.6 allows remote authenticated threat actors to inject malicious scripts into vulnerable web pages. A threat actor could potentially exploit this vulnerability to store malicious JavaScript which executes in the context of a user’s session with the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/google/security-
th the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/google/security-research/security/advisories/GHSA-6529-6jv3-66q2 - https://www.cve.org/CVERecord?id=CVE-2024-6585 - https://github.com/lightdash/lightdash - https://github.com/lightdash/lightdash/releases/tag/0.1042.2 - https://patch-diff.githubusercontent.com/raw/lightdash/lightdash/pull/9510.patch - https://patch-diff.githubusercontent.com/raw/lightdash/lightdash/pull/9359.patch - https://github.com/lightdash/lightdash/pull/9510 - https://github.com/lightdash/lightdash/pull/9359
CVE ID: CVE-2024-6586 State: PUBLISHED Published: 2024-08-30T22:25:48.431Z Last Updated: 2024-09-03T14:50:25.611Z Vendors: Lightdash Products: Lightdash Problem Types: CWE-201 Description: Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards. A dashboard that contains HTML elements which point to a threat actor controlled source can trigger an SSRF request when exported, via a POST request to /api/v1/dashboards//export. The forged request contains the value of the exporting user’s session token. A threat actor could obtain the session token of any user who exports the dashboard. The obtained session token can
en. A threat actor could obtain the session token of any user who exports the dashboard. The obtained session token can be used to perform actions as the victim on the application, resulting in session takeover. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/google/security-research/security/advisories/GHSA-4h7x-6vxh-7hjf - https://www.cve.org/CVERecord?id=CVE-2024-6586 - https://github.com/lightdash/lightdash - https://github.com/lightdash/lightdash/releases/tag/0.1027.2 - https://patch-diff.githubusercontent.com/raw/lightdash/lightdash/pull/9295.patch - https://github.com/lightdash/lightdash/pull/9295
CVE ID: CVE-2024-6587 State: PUBLISHED Published: 2024-09-13T15:59:53.557Z Last Updated: 2024-09-13T16:53:11.849Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: berriai Products: berriai/litellm Problem Types: CWE-918 Description: A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10. This vulnerability allows users to specify the `api_base` parameter when making requests to `POST /chat/completions`, causing the application to send the request to the domain specified by `api_base`. This request includes the OpenAI API key. A malicious user can set the `api_base` to their own domain and intercept the OpenAI API key, leadi
the OpenAI API key. A malicious user can set the `api_base` to their own domain and intercept the OpenAI API key, leading to unauthorized access and potential misuse of the API key. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/4001e1a2-7b7a-4776-a3ae-e6692ec3d997 - https://github.com/berriai/litellm/commit/ba1912afd1b19e38d3704bb156adf887f91ae1e0
CVE ID: CVE-2024-6588 State: PUBLISHED Published: 2024-07-12T06:50:29.920Z Last Updated: 2024-08-01T21:41:03.746Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: amandato Products: PowerPress Podcasting plugin by Blubrry Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The PowerPress Podcasting plugin by Blubrry plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘media_url’ parameter in all versions up to, and including, 11.9.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web
ent input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/745262f6-4f73-453e-b650-15115536f221?source=cve - https://plugins.trac.wordpress.org/browser/powerpress/trunk/powerpress-player.php#L1015 - https://wordpress.org/plugins/powerpress/#developers - https://plugins.trac.wordpress.org/changeset/3115881/#file0
CVE ID: CVE-2024-6589 State: PUBLISHED Published: 2024-07-25T10:59:51.542Z Last Updated: 2024-08-01T21:41:03.933Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: thimpress Products: LearnPress – WordPress LMS Plugin Problem Types: CWE-98 Description: The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.2.6.8.2 via the 'render_content_block_template' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to
e and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ba79bf95-08f8-4aa6-968b-f76a09ce52b8?source=cve - https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.8.2/inc/block-template/class-block-template-archive-course.php#L28 - https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.8.2/inc/block-template/class-b
archive-course.php#L28 - https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.8.2/inc/block-template/class-block-template-single-course.php#L28 - https://plugins.trac.wordpress.org/changeset/3124296/
CVE ID: CVE-2024-6590 State: PUBLISHED Published: 2024-09-25T02:05:24.882Z Last Updated: 2024-09-25T13:30:14.689Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: javmah Products: Spreadsheet Integration – Automate Google Sheets With WordPress, WooCommerce & Most Popular Form Plugins. Also, Display Google sheet as a Table. Problem Types: CWE-862 Description: The Spreadsheet Integration – Automate Google Sheets With WordPress, WooCommerce & Most Popular Form Plugins. Also, Display Google sheet as a Table. plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and inc
unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 3.7.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to edit post status, edit Google sheet integrations, and create Google sheet integrations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d35ff2cc-9af2-4b72-bc49-e205275daa4d?source=cve - https://plugins.trac.wordpress.org/browser/wpgsi/trunk/admin/class-wpgsi-admin.php#L812 - https://plugins.trac.wordpress.org/browser/wpgsi/trunk/admin/class-wpgsi-admin.php#L863 - https://plugins.trac.wordpres
https://plugins.trac.wordpress.org/browser/wpgsi/trunk/admin/class-wpgsi-admin.php#L863 - https://plugins.trac.wordpress.org/browser/wpgsi/trunk/admin/class-wpgsi-admin.php#L935 - https://plugins.trac.wordpress.org/browser/wpgsi/trunk/admin/class-wpgsi-admin.php#L1168
CVE ID: CVE-2024-6591 State: PUBLISHED Published: 2024-07-27T01:51:03.390Z Last Updated: 2024-08-01T21:41:04.048Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: nitesh_singh Products: Ultimate WordPress Auction Plugin Problem Types: CWE-862 Description: The Ultimate WordPress Auction Plugin plugin for WordPress is vulnerable to unauthorized email creation and sending due to a missing capability check on the 'send_auction_email_callback' and 'resend_auction_email_callback' functions in all versions up to, and including, 4.2.6. This makes it possible for unauthenticated attackers to craft emails that include links and send to any email address. Additional Ana
possible for unauthenticated attackers to craft emails that include links and send to any email address. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/534a5d1d-cc34-4d84-b3a3-bf2282718656?source=cve - https://plugins.trac.wordpress.org/browser/ultimate-auction/trunk/ultimate-auction.php#L93 - https://plugins.trac.wordpress.org/browser/ultimate-auction/trunk/ultimate-auction.php#L119
CVE ID: CVE-2024-6592 State: PUBLISHED Published: 2024-09-25T11:16:01.320Z Last Updated: 2025-10-15T17:57:05.727Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: WatchGuard Products: Authentication Gateway, Single Sign-On Client Problem Types: CWE-306 Description: Incorrect Authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows Authentication Bypass.This issue affects the Authentication Gateway: through 12.10.2; Windows Single Sign-On Client: through 12.7; MacOS Single Sign-On Client: through 12.5.4. Ad
n Gateway: through 12.10.2; Windows Single Sign-On Client: through 12.7; MacOS Single Sign-On Client: through 12.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00014
CVE ID: CVE-2024-6593 State: PUBLISHED Published: 2024-09-25T11:16:15.822Z Last Updated: 2024-09-25T13:53:45.988Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: WatchGuard Products: Authentication Gateway Problem Types: CWE-863 Description: Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows allows an attacker with network access to execute restricted management commands. This issue affects Authentication Gateway: through 12.10.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00015
CVE ID: CVE-2024-6594 State: PUBLISHED Published: 2024-09-25T11:22:45.610Z Last Updated: 2024-09-25T14:30:29.866Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: WatchGuard Products: Single Sign-On Client Problem Types: CWE-755 Description: Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malformed commands. An attacker with network access to the client could create a denial of service condition for the Single Sign-On service by repeatedly issuing malformed commands. This issue affects Single Sign-On Client: through 12.7. Additional Analyst Notes: - CISA ADP V
suing malformed commands. This issue affects Single Sign-On Client: through 12.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00016