CVE-2024-6973

CVE-2024-6973 affects the Cato Windows SDP client. Affects versions prior to 5.10.34 with remote code execution via crafted URLs due to improper input validation. Exploitation details are not provided in the sources, but multiple feeds confirm RCE vulnerability and affected version range. Remedia...

CVE-2024-6973 Remote Code Execution in Cato Windows SDP client via crafted URLs

Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34...

Cato Networks Windows SDP Client 安全漏洞

Cato Networks Windows SDP Client is a secure remote access software from Cato Networks, Israel. A security vulnerability exists in Cato Networks Windows SDP Client versions prior to 5.10.34 that stems from the ability to achieve local elevation of privilege via self-upgrade...

Cato Networks Windows SDP Client 安全漏洞

Cato Networks Windows SDP Client is a secure remote access software from Cato Networks, Israel. A security vulnerability exists in Cato Networks Windows SDP Client versions prior to 5.10.28, which stems from allowing sensitive information to be inserted into log files, potentially leading to...

PT-2024-38014 · Cato Networks · Cato Networks Windows Sdp Client

Name of the Vulnerable Software and Affected Versions: Cato Networks Windows SDP Client versions prior to 5.10.34 Description: The issue is related to a local privilege escalation vulnerability in the Cato Networks Windows SDP Client via the openssl configuration file. Recommendations: For versio...

CVE-2024-6977: Insertion of Sensitive Information into Log File

A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on a the attacker's system.This issue affects SDP Client:...

CVE-2024-6973: Improper Input Validation

Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34...

CVE-2024-6978: Improper Input Validation

Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users.This issue affects SDP Client: before 5.10.28...

CVE-2024-6975: Untrusted Search Path

Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file. This issue affects SDP Client before 5.10.34...

CVE-2024-6974: Untrusted Search Path

Cato Networks Windows SDP Client Local Privilege Escalation via self-upgradeThis issue affects SDP Client: before 5.10.34...

Design/Logic Flaw

In Cyxtera AppGate SDP Client 4.1.x through 4.3.x before 4.3.2 on Windows, a local or remote user from the same domain can gain privileges...

CVE-2019-19793

In Cyxtera AppGate SDP Client 4.1.x through 4.3.x before 4.3.2 on Windows, a local or remote user from the same domain can gain privileges...

PT-2019-15961 · Cyxtera · Cyxtera Appgate Sdp Client

Name of the Vulnerable Software and Affected Versions: Cyxtera AppGate SDP Client versions 4.1.x through 4.3.x before 4.3.2 Description: A local or remote user from the same domain can gain privileges in the affected software. Recommendations: For versions 4.1.x through 4.3.x before 4.3.2, update...

CVE-2019-19793: Time-of-check Time-of-use (TOCTOU) Race Condition

In Cyxtera AppGate SDP Client 4.1.x through 4.3.x before 4.3.2 on Windows, a local or remote user from the same domain can gain privileges...