Advisories · Technology
Cato Networks SDP Client.
Every CVE that names Cato Networks SDP Client among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Cato Windows SDP Client arbitrary file disclosure due to improper TLS certificate validation
- Cato Networks SDP Client
- Path traversal
- Weak cryptography or TLS
- CVSS 8.5 High
Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation
- Cato Networks SDP Client
- Path traversal
- CVSS 6.4 Medium
Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool
- Cato Networks SDP Client
- Weak cryptography or TLS
- Race condition
- CVSS 5.7 Medium
CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race Condition
- Cato Networks SDP Client
- Race condition
- CVSS 5.6 Medium
Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users
- Cato Networks SDP Client
- CWE-20
- CVSS 6.5 Medium
Cato Networks Windows SDP Client Sensitive data in trace logs can lead to account takeover
- Cato Networks SDP Client
- Information disclosure
- CVSS 8.8 High
Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file
- Cato Networks SDP Client
- CWE-426
- CVSS 8.8 High
Cato Networks Windows SDP Client Local Privilege Escalation via self-upgrade
- Cato Networks SDP Client
- Broken access control
- CWE-426
- CVSS 7.5 High
Remote Code Execution in Cato Windows SDP client via crafted URLs
- Cato Networks SDP Client
- CWE-20