What’s Vulnerable › Vulnerabilities
CVE-2024-6977: Cato Networks Windows SDP Client Sensitive data in trace logs can lead to account takeover
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2024-07-31 · updated 2026-06-17
- Weakness: CWE-532
Description
A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on a the attacker's system.This issue affects SDP Client: before 5.10.34.
Affected products
- Cato Networks SDP Client: through 5.10.34
References
Get alerted when CVE-2024-6977 or the next vulnerability affects your stack