PT-2023-18643 · Netskope · Netskope Client

Jean-Jamil Khalife · Published 2023-06-15 · Updated 2024-08-22 · CVE-2023-2270

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Netskope client versions prior to R100

Description The Netskope client service, running with NTSYSTEM privileges, accepts network connections from localhost to start various services and execute commands. A connection handling function in the service uses a relative path to download and unzip configuration files, allowing local users to write arbitrary files in a location accessible only to higher privileged users. This can be exploited by local users to execute code with NTSYSTEM privileges on the end machine.

Recommendations For versions prior to R100, update to R100 or later to resolve the issue. As a temporary workaround, consider restricting access to the connection handling function to minimize the risk of exploitation. Avoid using the relative path for downloading and unzipping configuration files until the issue is resolved.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-2270

Affected Products

Netskope Client

References · 6

• https://osv.dev/vulnerability/CVE-2023-2270 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2270 · Security Note
• https://netskope.com/company/security-compliance-and-assurance/security-advisories-and-disclosures/netskope-security-advisory-nskpsa-2023-001 · Vendor Advisory
• https://t.me/cvenotify/52380 · Telegram Post
• https://t.me/cvenotify/91715 · Telegram Post
• https://t.me/cibsecurity/65257 · Telegram Post