CVE-2024-0311

A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code.

Scoring

Severity

MEDIUM

CVSS base score

5.5

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS probability

0.42%

CWE

CWE-622

Published

2024-03-14

Last modified

2026-03-13

Affected products

• Skyhigh Skyhigh Client Proxy

Weakness type

• CWE-622

Related vulnerabilities

• CVE-2024-0312 — A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password.

Markdown version · Browse all CVEs