PT-2025-1660 · Vmware · Horizon Client For Mac

Published 2025-02-04 · Updated 2025-02-05 · CVE-2024-11467

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Omnissa Horizon Client for macOS (affected versions not specified)

Description The issue is due to a logic flaw, allowing attackers with user privileges to escalate their privileges to root on the system where the Horizon Client for macOS is installed. Successful exploitation of this issue may allow attackers to gain elevated access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2024-11467

Affected Products

Horizon Client For Mac

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-11467 · Security Note
• https://omnissa.com/omnissa-security-response · Note
• https://static.omnissa.com/sites/default/files/OMSA-2024-0002.pdf · Note
• https://t.me/cvenotify/110036 · Telegram Post
• https://t.me/cvedetector/17267 · Telegram Post
• https://twitter.com/CVEnew/status/1886905521288175683 · Twitter Post