CVE-2024-6973

Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34...

CVE-2024-6978

CVE-2024-6978 affects Cato Networks Windows SDP Client prior to 5.10.28. Local low-privileged user can install root certificates on the host, with potential security impact as described by multiple sources. PT-2024-38016 also notes an Improper Input Validation vulnerability enabling Command Injec...

CVE-2024-6978 Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users

Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users.This issue affects SDP Client: before 5.10.28...

CVE-2024-6978 Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users

Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users.This issue affects SDP Client: before 5.10.28...

CVE-2024-6977 Cato Networks Windows SDP Client Sensitive data in trace logs can lead to account takeover

A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on a the attacker's system.This issue affects SDP Client:...

CVE-2024-6977 Cato Networks Windows SDP Client Sensitive data in trace logs can lead to account takeover

A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on a the attacker's system.This issue affects SDP Client:...

CVE-2024-6977

Cato Networks Windows SDP Client has a vulnerability prior to version 5.10.34 where sensitive information can be written into trace/log files, potentially enabling an account takeover. The issue requires bypassing protections that modify the tunnel token on the attacker’s system. Affected softwar...

CVE-2024-6975

CVE-2024-6975 concerns Cato Networks Windows SDP Client prior to 5.10.34. The vulnerability is a local privilege escalation through the openssl configuration file, affecting the SDP Client component. Public sources in connected documents consistently describe a local-exploitation risk with no rem...

CVE-2024-6975 Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file

Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file. This issue affects SDP Client before 5.10.34...

CVE-2024-6975 Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file

Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file. This issue affects SDP Client before 5.10.34...

CVE-2024-6974 Cato Networks Windows SDP Client Local Privilege Escalation via self-upgrade

Cato Networks Windows SDP Client Local Privilege Escalation via self-upgradeThis issue affects SDP Client: before 5.10.34...

CVE-2024-6974 Cato Networks Windows SDP Client Local Privilege Escalation via self-upgrade

Cato Networks Windows SDP Client Local Privilege Escalation via self-upgradeThis issue affects SDP Client: before 5.10.34...

CVE-2024-6974

CVE-2024-6974 affects the Windows Cato Networks SDP Client (pre-5.10.34). The PT Security entry attributes local privilege escalation to an untrusted search path and incorrect default permissions within the client, enabling escalation on affected Windows hosts. Remediation: upgrade to version 5.1...

CVE-2024-6973 Remote Code Execution in Cato Windows SDP client via crafted URLs

Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34...

CVE-2024-6973 Remote Code Execution in Cato Windows SDP client via crafted URLs

Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34...

CVE-2024-6973

CVE-2024-6973 affects the Cato Windows SDP client. Affects versions prior to 5.10.34 with remote code execution via crafted URLs due to improper input validation. Exploitation details are not provided in the sources, but multiple feeds confirm RCE vulnerability and affected version range. Remedia...

PT-2024-38014 · Cato Networks · Cato Networks Windows Sdp Client

Name of the Vulnerable Software and Affected Versions: Cato Networks Windows SDP Client versions prior to 5.10.34 Description: The issue is related to a local privilege escalation vulnerability in the Cato Networks Windows SDP Client via the openssl configuration file. Recommendations: For versio...

PT-2024-38013 · Cato Networks · Cato Networks Sdp Client

Name of the Vulnerable Software and Affected Versions: Cato Networks SDP Client versions prior to 5.10.34 Description: The issue affects the Cato Networks SDP Client on Windows, allowing for local privilege escalation due to an untrusted search path and incorrect default permissions...

Cato Networks Windows SDP Client 安全漏洞

Cato Networks Windows SDP Client is a secure remote access software from Cato Networks, Israel. A security vulnerability exists in Cato Networks Windows SDP Client versions prior to 5.10.34 that stems from the ability to achieve local elevation of privilege via self-upgrade...

Cato Networks Windows SDP Client 安全漏洞

Cato Networks Windows SDP Client is a secure remote access software from Cato Networks, Israel. A security vulnerability exists in Cato Networks Windows SDP Client versions prior to 5.10.28, which stems from allowing sensitive information to be inserted into log files, potentially leading to...