PT-2023-18643 · Netskope · Netskope Client

Jean-Jamil Khalife · Publicado 2023-06-15 · Atualizado 2024-08-22 · CVE-2023-2270

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Netskope client versions prior to R100

Description The Netskope client service, running with NTSYSTEM privileges, accepts network connections from localhost to start various services and execute commands. A connection handling function in the service uses a relative path to download and unzip configuration files, allowing local users to write arbitrary files in a location accessible only to higher privileged users. This can be exploited by local users to execute code with NTSYSTEM privileges on the end machine.

Recommendations For versions prior to R100, update to R100 or later to resolve the issue. As a temporary workaround, consider restricting access to the connection handling function to minimize the risk of exploitation. Avoid using the relative path for downloading and unzipping configuration files until the issue is resolved.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-2270

Produtos afetados

Netskope Client

Referências · 6

• https://osv.dev/vulnerability/CVE-2023-2270 · Aviso do Fabricante
• https://t.me/cvenotify/52380 · Publicação no Telegram
• https://t.me/cvenotify/91715 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-2270 · Nota de Segurança
• https://netskope.com/company/security-compliance-and-assurance/security-advisories-and-disclosures/netskope-security-advisory-nskpsa-2023-001 · Aviso do Fabricante
• https://t.me/cibsecurity/65257 · Publicação no Telegram