CVE-2024-11467
Published: 04 February 2025
Summary
CVE-2024-11467 is a high-severity Improper Privilege Management (CWE-269) vulnerability in Omnissa Horizon Client (inferred from references). Its CVSS base score is 7.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 21.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 AC-6 (Least Privilege) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2024-11467 is a local privilege escalation (LPE) vulnerability stemming from a logic flaw in the Omnissa Horizon Client for macOS. This issue affects systems where the Horizon Client is installed, enabling attackers to elevate privileges. The vulnerability has a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and is associated with CWE-269 (Improper Privilege Management).
Local users with standard privileges on the affected macOS system can exploit this vulnerability without requiring additional user interaction. Successful exploitation grants root-level access, potentially allowing full control over the system, including high-impact compromise of confidentiality, integrity, and availability.
Omnissa has published security advisory OMSA-2024-0002, available at https://static.omnissa.com/sites/default/files/OMSA-2024-0002.pdf, along with additional details on their security response page at https://www.omnissa.com/omnissa-security-response/. These resources outline mitigation and patching guidance for addressing the vulnerability.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-34420
Vulnerability details
Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a logic flaw. Successful exploitation of this issue may allow attackers with user privileges to escalate their privileges to root on the system where the Horizon…
more
Client for macOS is installed.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Local privilege escalation vulnerability (CWE-269) directly enables T1068 by allowing standard local users to gain root via logic flaw exploitation.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly remediates the LPE vulnerability through timely identification, reporting, and patching of the logic flaw in Omnissa Horizon Client as advised in OMSA-2024-0002.
Mitigates the CWE-269 improper privilege management by enforcing least privilege for processes and users, limiting the impact and success of local privilege escalation.
Requires enforcement of access control policies to prevent unauthorized privilege escalations resulting from logic flaws in the Horizon Client software.