CVE-2024-6977: Cato Networks Windows SDP Client Sensitive data in trace logs can lead to account takeover
A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on a the attacker's system.This issue affects SDP Client: before 5.10.34.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6977?
CVE-2024-6977 is considered a high severity vulnerability due to its potential to lead to account takeover.
How do I fix CVE-2024-6977?
To address CVE-2024-6977, users should upgrade to the latest version of the Cato Networks SDP Client for Windows that exceeds version 5.10.34.
What types of systems are affected by CVE-2024-6977?
CVE-2024-6977 affects the Cato Networks SDP Client on Windows systems.
What does CVE-2024-6977 allow an attacker to do?
CVE-2024-6977 allows an attacker to potentially access sensitive information in log files, which could enable account takeover.
Is there a workaround for CVE-2024-6977 if I can't update immediately?
There are no specific workarounds mentioned for CVE-2024-6977, so timely updates are recommended.