Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-6977

Cato Networks Windows SDP Client Sensitive data in trace logs can lead to account takeover

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Cato

Description

A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on a the attacker's system.This issue affects SDP Client: before 5.10.34.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cato Networks SDP Client

Default version status: unaffected

  • 0 to < 5.10.28affected

References