Vulnerability in Omnissa Horizon Client For macOS
CVE-2024-11468
Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process. Successful exploitation of this issue may allow attackers with user privileges to escalate their privileges to root on the system where the Horizon Client for macOS is installed.
EPSS: 0.002 (6.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Omnissa Horizon Client For Macos — versions Omnissa Horizon Client for macOS 2406 or earlier
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-11468?
- CVE-2024-11468 is a high-severity vulnerability in Omnissa Horizon Client For macOS, classified under Incorrect Default Permissions. CVSS score: 7.8/10. Published 2025-02-04.
- How severe is CVE-2024-11468?
- High severity. CVSS v3 base score is 7.8 out of 10.