CVE-2024-11467

Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a logic flaw. Successful exploitation of this issue may allow attackers with user privileges to escalate their privileges to root on the system where the Horizon Client for macOS is installed.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://static.omnissa.com/sites/default/files/OMSA-2024-0002.pdf
https://www.omnissa.com/omnissa-security-response/

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) Omnissa Horizon Client para macOS contiene una vulnerabilidad de escalada de privilegios locales (LPE) debido a una falla lógica. La explotación exitosa de este problema puede permitir a los atacantes con privilegios de usuario escalar sus privilegios a superusuario en sistema donde está instalado Horizon Client para macOS.

05 Feb 2025, 15:15

Type	Values Removed	Values Added
CWE		CWE-269

04 Feb 2025, 23:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-02-04 23:15

Updated : 2026-06-17 06:57

NVD link : CVE-2024-11467

Mitre link : CVE-2024-11467

CVE.ORG link : CVE-2024-11467

JSON object : View

Products Affected

No product.

CWE

CWE-269

Improper Privilege Management

{"id": "CVE-2024-11467", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-11467", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-02-05T15:04:48.828520Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "de5a6978-88fe-4c27-a7df-d0d5b52d5b52", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "de5a6978-88fe-4c27-a7df-d0d5b52d5b52", "affectedData": [{"vendor": "Omnissa", "product": "Omnissa Horizon Client for MacOS", "versions": [{"status": "affected", "version": "Omnissa Horizon Client for macOS 2406 or earlier"}], "platforms": ["MacOS"], "defaultStatus": "unaffected"}]}], "published": "2025-02-04T23:15:08.580", "references": [{"url": "https://static.omnissa.com/sites/default/files/OMSA-2024-0002.pdf", "source": "de5a6978-88fe-4c27-a7df-d0d5b52d5b52"}, {"url": "https://www.omnissa.com/omnissa-security-response/", "source": "de5a6978-88fe-4c27-a7df-d0d5b52d5b52"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a logic flaw.\u00a0Successful exploitation of this issue may allow attackers with user privileges to escalate their privileges to root on the system where the Horizon Client for macOS is installed."}, {"lang": "es", "value": "Omnissa Horizon Client para macOS contiene una vulnerabilidad de escalada de privilegios locales (LPE) debido a una falla l\u00f3gica. La explotaci\u00f3n exitosa de este problema puede permitir a los atacantes con privilegios de usuario escalar sus privilegios a superusuario en sistema donde est\u00e1 instalado Horizon Client para macOS."}], "lastModified": "2026-06-17T06:57:48.430", "sourceIdentifier": "de5a6978-88fe-4c27-a7df-d0d5b52d5b52"}