Untrusted Search Path Vulnerability in Cato Networks SDP Client Allows Privilege Escalation

CVE-2024-6975

What is CVE-2024-6975?

Cato Networks' SDP Client suffers from a local privilege escalation vulnerability due to a flaw in its OpenSSL configuration file. This security issue could allow an attacker with local access to the affected system to elevate their privileges, potentially leading to unauthorized access and manipulation of system resources. All versions of the SDP Client prior to 5.10.34 are impacted, warranting immediate attention for users and administrators to mitigate the associated risks.

References