← volver
CVE-2024-7402

Netskope Client Configuration Tampering with Local MITM

CVSS 7 HIGHEPSS 0.1%CWE-354
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 7EPSS 0.1%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
14 ago 2025Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Netskope has identified a potential gap in its agent (Netskope Client) in which a malicious insider can potentially tamper the Netskope Client configuration by performing MITM (Man-in-the-Middle) activity on the Netskope Client communication channel. A successful exploitation would require administrative privileges on the machine, and could result in temporarily altering the configuration of Netskope Client or permanently disabling or removing the agent from the machine.
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:H/SA:H
Productos afectados
Netskope · Netskope Client

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →