Richard Warren
David Cash- 31 Jul, 2024
Cato SSO - Open Redirect Leading to Config Theft
The web service used during the Cato SSO authentication flow was found to contain an Open Redirect issue, which could allow a remote attacker to …
Read Article-
Richard Warren
-
David Cash
- 31 Jul, 2024
Remote Code Execution via Crafted URLs (CVE-2024-6973)
The Cato Client suffers from a Remote Code Execution vulnerability which could be triggered via a URL handler, or via requests to the local webserver.
Read Article-
Richard Warren
-
David Cash
- 31 Jul, 2024
Cato Client - Local Root Certificate Install as Low Privileged User (CVE-2024-6978)
The Cato Client allows a low-privileged, local user to install arbitrary Root CA Certificates in the computer’s certificate store.
Read Article