An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition (TOCTOU) via the PrivilegedHelperTool component.
A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover.
CVSS 3.1MEDIUM 6.5·Local·Low privileges·No interaction·EPSS 0.00227·Published 2024-07-31·Fixed in 5.10.28CWE-532
An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition (TOCTOU) via the PrivilegedHelperTool component.
CVSS 4.0MEDIUM 5.7·Local·Low privileges·No interaction·EPSS 0.0025·Published 2025-04-27·Fixed in 5.8.0CWE-362