CVE-2024-11468
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process. Successful exploitation of this issue may allow attackers with user privileges to escalate their privileges to root on the system where the Horizon Client for macOS is installed.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Omnissa | Omnissa Horizon Client for MacOS | Omnissa Horizon Client for macOS 2406 or earlier | affected |
Weaknesses
- Installer Process Vulnerability
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
- https://static.omnissa.com/sites/default/files/OMSA-2024-0002.pdf
- https://www.omnissa.com/omnissa-security-response/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.