CVE-2024-0313 - CVE House
Back to Database
Status published Medium CVE-2024-0313

A malicious insider exploiting this vulnerability can circumvent existing security...

Vulnerability Description

A malicious insider exploiting this vulnerability can circumvent existing security controls put in place by the organization. On the contrary, if the victim is legitimately using the temporary bypass to reach out to the Internet for retrieving application and system updates, a remote device could target it and undo the bypass, thereby denying the victim access to the update service, causing it to fail.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-0313

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Winston Ho (@violenttestpen)

References

More from Skyhigh

View All →
CVE-2024-6398
An information disclosure vulnerability in SWG in versions 12.x prior...
Medium 4.3
CVE-2024-0312
A malicious insider can uninstall Skyhigh Client Proxy without a...
Medium 5.5
CVE-2024-0311
A malicious insider can bypass the existing policy of Skyhigh...
Medium 5.5

Affected Vendor

Affected Software

Skyhigh Client Proxy
Vulnerable Versions:
4.8.1

Timeline

Official Publish: March 14th, 2024
Last Modified: August 2nd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

CWE-670

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.