Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files...

Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-supplied SID over a local IPC named pipe.