Sdp Client
Approved changes feed: RSS · Atom
cpe:2.3:a:cato_networks:sdp_client:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cato Networks (4378d648-bae1-52e1-bb1c-cddcb2f15bb2) |
|---|---|
| Product | Sdp Client (c90b1c77-bd69-5dde-99c8-a11bace28fbf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-12374 |
vulnerable | 2026-07-29 00:23:32.271540 |
Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool
Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller verification and a symlink swap during package installation.
Published: 2026-07-01T14:07:28.896Z
Updated: 2026-07-01T15:07:24.153Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3886 |
vulnerable | 2026-06-08 07:23:10.085806 |
CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race Condition
An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition (TOCTOU) via the PrivilegedHelperTool component.
Published: 2025-04-27T10:41:17.670Z
Updated: 2025-04-28T16:31:10.186Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6978 |
vulnerable | 2026-06-08 06:58:20.876404 |
Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users
MEDIUM (5.6)
Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users.This issue affects SDP Client: before 5.10.28.
Published: 2024-07-31T16:56:16.063Z
Updated: 2024-07-31T19:55:16.797Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6977 |
vulnerable | 2026-06-08 06:58:20.876029 |
Cato Networks Windows SDP Client Sensitive data in trace logs can lead to account takeover
MEDIUM (6.5)
A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on a the attacker's system.This issue affects SDP Client: before 5.10.34.
Published: 2024-07-31T16:56:06.000Z
Updated: 2024-07-31T17:08:09.827Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6975 |
vulnerable | 2026-06-08 06:58:20.875533 |
Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file
HIGH (8.8)
Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file.
This issue affects SDP Client before 5.10.34.
Published: 2024-07-31T16:55:55.599Z
Updated: 2024-08-01T08:56:42.944Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6974 |
vulnerable | 2026-06-08 06:58:20.874976 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6973 |
vulnerable | 2026-06-08 06:58:20.873782 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.