VulnerabilityDeferred

CVE-2024-11468

Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process.

HIGH 7.8EPSS 0.17%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.17%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process. Successful exploitation of this issue may allow attackers with user privileges to escalate their privileges to root on the system where the Horizon Client for macOS is installed.

CVSS 3.1: 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.17% probability · 7th percentile
CISA KEV: Not listed
Weakness: CWE-276
Source: de5a6978-88fe-4c27-a7df-d0d5b52d5b52

References

https://static.omnissa.com/sites/default/files/OMSA-2024-0002.pdf
https://www.omnissa.com/omnissa-security-response/

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.