PT-2024-38015 · Cato Networks · Cato Networks Sdp Client

Amberwolf · Published 2024-07-31 · Updated 2024-08-27 · CVE-2024-6977

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cato Networks SDP Client versions prior to 5.10.34

Description A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on the attacker's system.

Recommendations For versions prior to 5.10.34, update to version 5.10.34 or later to resolve the issue. As a temporary workaround, consider restricting access to the log file to minimize the risk of exploitation.

Exploit

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2024-6977

Affected Products

Cato Networks Sdp Client

References · 5

• 🔥 https://support.catonetworks.com/hc/en-us/articles/19766795729437-CVE-2024-6977-Windows-SDP-Client-Sensitive-data-in-trace-logs-can-lead-to-account-takeover · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-6977 · Security Note
• https://osv.dev/vulnerability/CVE-2024-6977 · Vendor Advisory
• https://t.me/cvedetector/2156 · Telegram Post
• https://t.me/cvenotify/88095 · Telegram Post