Medium severity · published Jul 31, 2024
CVE-2024-6977
A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover
6.5
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on a the attacker's system.This issue affects SDP Client: before 5.10.34.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CC
Cato Client · Catonetworks
through 5.10.34 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-6977
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-6977
Exploit
https://support.catonetworks.com/hc/en-us/articles/19766795729437-CVE-2024-6977-Windows-SDP-Client-Sensitive-data-in-trace-logs-can-lead-to-account-takeover
More from Cato Client
8.8
CVE-2024-6978
Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users.This issue affects SDP Client: before 5.10.28
8.8
CVE-2024-6975
Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file
8.8
CVE-2024-6973
Remote Code Execution in Cato Windows SDP client via crafted URLs
8.1
CVE-2025-3886
CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race Condition
8.1
CVE-2023-43976
An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition (TOCTOU) via the PrivilegedHelperTool component