CVEvulnerability

CVE-2024-6977

6.5 MEDIUM Published 2024-07-31 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-07-31
Last modified
2026-06-17
Assigner
2505284f-8ffb-486c-bf60-e19c1097a90b
CVSS 3.1 (2505284f-8ffb-486c-bf60-e19c1097a90b)
6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Weaknesses
CWE-532

Description

A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on a the attacker's system.This issue affects SDP Client: before 5.10.34.

Affected configurations

• catonetworks cato client (<= 5.10.34)

Related

Weakness · CWE (1)

  • CWE-532 Insertion of Sensitive Information into Log File weakness

References