CVEvulnerability
CVE-2024-11468
7.8 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2025-02-04
- Last modified
- 2026-06-17
- Assigner
- de5a6978-88fe-4c27-a7df-d0d5b52d5b52
- CVSS 3.1 (de5a6978-88fe-4c27-a7df-d0d5b52d5b52)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-276
Description
Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process. Successful exploitation of this issue may allow attackers with user privileges to escalate their privileges to root on the system where the Horizon Client for macOS is installed.
Related
Weakness · CWE (1)
- CWE-276 Incorrect Default Permissions weakness
References
- https://static.omnissa.com/sites/default/files/OMSA-2024-0002.pdf static.omnissa.com
- https://www.omnissa.com/omnissa-security-response/ www.omnissa.com