CVE-2024-11468

State: Published
Severity: 7.8 High
Published: Feb 4, 2025
Updated: Feb 5, 2025
Reserved: Nov 19, 2024

Description

Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process. Successful exploitation of this issue may allow attackers with user privileges to escalate their privileges to root on the system where the Horizon Client for macOS is installed.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Omnissa

Weaknesses

CWE-276 Incorrect Default Permissions

Affected Products

Product	Versions
Omnissa Horizon Client for MacOSOmnissa	Omnissa Horizon Client for macOS 2406 or earlierAffected

References

https://static.omnissa.com/sites/default/files/OMSA-2024-0002.pdf
https://www.omnissa.com/omnissa-security-response/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.