PT-2023-31425 · Netskope · Netskope Client

Alexander Katziv · Publicado 2023-11-06 · Atualizado 2023-11-14 · CVE-2023-4996

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Netskope NSClient versions 100 and prior

Description A security issue was discovered in the NSClient product where a malicious non-admin user can disable the Netskope client using a specially-crafted package. The root cause is a user control code that does not validate user permissions before execution when called by a Windows ServiceController, allowing it to terminate the NSClient service.

Recommendations For versions 100 and prior, update to a version later than 100 to resolve the issue. As a temporary workaround, consider restricting access to the user control code to prevent unauthorized execution until a patch is available.

Correção

Improper Preservation of Permissions

Enumeração de Fraquezas

CWE-281

Identificadores relacionados

CVE-2023-4996

Produtos afetados

Netskope Client

Referências · 4

• https://netskope.com/company/security-compliance-and-assurance/security-advisories-and-disclosures/netskope-security-advisory-nskpsa-2023-003 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-4996 · Aviso do Fabricante
• https://t.me/cibsecurity/73601 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-4996 · Nota de Segurança