A high-severity access control vulnerability in SecureAge CatchPulse allows local attackers to bypass security policies, potentially leading to unauthorized system modifications.

This is an improper access control vulnerability where a local, authenticated low-privileged user can interface with an unrestricted kernel filter communication port. By exploiting this, an attacker can circumvent the security policy enforcement mechanisms managed by the application.

Successful exploitation allows a local user to bypass security restrictions, which could lead to the execution of prohibited actions or the suppression of security alerts. With a CVSS score of 8.4, this vulnerability poses a significant risk to the integrity and availability of the host system, as the security software is rendered ineffective against the attacker.

Immediate Action: Update SecureAge CatchPulse to the latest available version as provided by the vendor.

Proactive Monitoring: Review local system logs for unauthorized attempts to access kernel-level communication ports or unexpected changes in security policy enforcement states.

Compensating Controls: Ensure that local user permissions are strictly governed and that non-administrative users are limited in their ability to interact with sensitive system-level components.

Public Exploit Available: No

Given the ability of this vulnerability to bypass primary security controls, administrators should prioritize patching all instances of CatchPulse. Immediate deployment of the vendor update is required to restore the integrity of the security stack.