CVE-2024-11468 - Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process

Back Back to CVE browser

HIGH

Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process

Published Feb 4, 2025

7.8

HIGH

CVSS 3.1

EPSS 0.17%

Description

Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process. Successful exploitation of this issue may allow attackers with user privileges to escalate their privileges to root on the system where the Horizon Client for macOS is installed.

Affected products

Vendor Omnissa Product Omnissa Horizon Client for MacOS Default
unaffected
- Version
  Omnissa Horizon Client for macOS 2406 or earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Omnissa

Omnissa Horizon Client for MacOS

unaffected

Version	Status	Constraints
Omnissa Horizon Client for macOS 2406 or earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-34421		Advisory
https://static.omnissa.com/sites/default/files/OMSA-2024-0002.pdf
https://www.omnissa.com/omnissa-security-response/