Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q77q-33v2-m8hr

Опубликовано: 31 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on a the attacker's system.This issue affects SDP Client: before 5.10.34.

A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on a the attacker's system.This issue affects SDP Client: before 5.10.34.

EPSS

Процентиль: 6%
0.00025
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-532

Связанные уязвимости

CVSS3: 6.5
nvd
больше 1 года назад

A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on a the attacker's system.This issue affects SDP Client: before 5.10.34.

EPSS

Процентиль: 6%
0.00025
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-532