CVE-2024-0312

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Mar 14, 2024
CWE ID 622

Summary

CVE-2024-0312 is a vulnerability affecting the Skyhigh Client Proxy software. This issue allows a malicious insider to uninstall the software without providing a valid uninstall password. With unauthorized access to an organization's network, an attacker could exploit this vulnerability to disrupt services or gain unauthorized access to sensitive data. The absence of adequate security measures during the uninstallation process poses a significant risk to the organization's cybersecurity posture. This vulnerability emphasizes the importance of implementing strict access control policies and monitoring for unauthorized changes within an organization's IT infrastructure.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share