PT-2023-31425 · Netskope · Netskope Client

Alexander Katziv · Published 2023-11-06 · Updated 2023-11-14 · CVE-2023-4996

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Netskope NSClient versions 100 and prior

Description A security issue was discovered in the NSClient product where a malicious non-admin user can disable the Netskope client using a specially-crafted package. The root cause is a user control code that does not validate user permissions before execution when called by a Windows ServiceController, allowing it to terminate the NSClient service.

Recommendations For versions 100 and prior, update to a version later than 100 to resolve the issue. As a temporary workaround, consider restricting access to the user control code to prevent unauthorized execution until a patch is available.

Fix

Improper Preservation of Permissions

Weakness Enumeration

CWE-281

Related Identifiers

CVE-2023-4996

Affected Products

Netskope Client

References · 4

• https://netskope.com/company/security-compliance-and-assurance/security-advisories-and-disclosures/netskope-security-advisory-nskpsa-2023-003 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-4996 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4996 · Security Note
• https://t.me/cibsecurity/73601 · Telegram Post