Back to Database
Status published
High
CVE-2024-1417
Local Code Injection Vulnerability in AuthPoint Password Manager App for macOS Safari
Vulnerability Description
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in WatchGuard AuthPoint Password Manager on MacOS allows an a adversary with local access to execute code under the context of the AuthPoint Password Manager application. This issue affects AuthPoint Password Manager for MacOS versions before 1.0.6.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-1417
Credits & Attribution
No credits recorded in the NVD database.
More from WatchGuard
View All →CVE-2025-9242
WatchGuard Firebox iked Out of Bounds Write Vulnerability
Critical
9.3
CVE-2025-6999
WatchGuard Firebox Authentication Portal Request Smuggling Vulnerability
Medium
6.9
CVE-2025-6947
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration
Medium
4.8
CVE-2025-6946
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration
Medium
4.8
CVE-2025-4805
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Acces Portal Configuration
Medium
4.8
Affected Vendor
WatchGuard
View all reports →Affected Software
AuthPoint Password Manager
Vulnerable Versions:
0
Timeline
Official Publish:
May 16th, 2024
Last Modified:
August 1st, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H