{"id":"CVE-2024-11468","state":"PUBLISHED","title":"Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process. Successful exploitation of this issue may allo","description":"Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process. Successful exploitation of this issue may allow attackers with user privileges to escalate their privileges to root on the system where the Horizon Client for macOS is installed.","publishedAt":"2025-02-04T22:17:33.319Z","updatedAt":"2025-02-05T15:39:33.820Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"Omnissa"},"assigner":"Omnissa","products":["Omnissa Omnissa Horizon Client for MacOS"],"affected":[{"vendor":"Omnissa","product":"Omnissa Horizon Client for MacOS","defaultStatus":"unaffected","versions":[{"version":"Omnissa Horizon Client for macOS 2406 or earlier","status":"affected"}],"platforms":["MacOS"]}],"references":["https://static.omnissa.com/sites/default/files/OMSA-2024-0002.pdf","https://www.omnissa.com/omnissa-security-response/"],"weaknesses":["CWE-276"],"ingestedAt":"2026-10-29T20:06:50.777Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/11xxx/CVE-2024-11468.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-11468","state":"PUBLISHED","datePublished":"2025-02-04T22:17:33.319Z","dateUpdated":"2025-02-05T15:39:33.820Z","assignerShortName":"Omnissa","assignerOrgId":"de5a6978-88fe-4c27-a7df-d0d5b52d5b52","dateReserved":"2024-11-19T21:12:57.595Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process. Successful exploitation of this issue may allow attackers with user privileges to escalate their privileges to root on the system where the Horizon Client for macOS is installed."}],"affected":[{"vendor":"Omnissa","product":"Omnissa Horizon Client for MacOS","defaultStatus":"unaffected","versions":[{"version":"Omnissa Horizon Client for macOS 2406 or earlier","status":"affected"}],"platforms":["MacOS"]}],"references":[{"url":"https://static.omnissa.com/sites/default/files/OMSA-2024-0002.pdf"},{"url":"https://www.omnissa.com/omnissa-security-response/"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"description":"Installer Process Vulnerability","lang":"en"}]}],"providerMetadata":{"shortName":"Omnissa","orgId":"de5a6978-88fe-4c27-a7df-d0d5b52d5b52","dateUpdated":"2025-02-04T22:17:33.319Z"},"credits":[{"lang":"en","type":"reporter","value":"Omnissa would like to thank Max Keasley of WithSecure Consulting for reporting this issue to us."}],"impacts":[{"capecId":"CAPEC-233","descriptions":[{"lang":"en","value":"CAPEC-233 Privilege Escalation"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-02-05T15:38:37.875343Z","id":"CVE-2024-11468","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-276","type":"CWE","lang":"en","description":"CWE-276 Incorrect Default Permissions"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-05T15:39:33.820Z"}}]}}}