Vulnerability · Published Apr 15, 2025 · Assigned by Netskope

CVE-2024-13177Symlink Following in Netskope Client Postinstall Script

Medium 5.2

In plain English

A medium-severity security flaw in Netskope Client from Netskope. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).

Severity (CVSS 4.0)5.2Medium

Exploit odds (30 days)0.1%top 95.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Netskope Client on Mac OS is impacted by a vulnerability in which the postinstall script does not properly validate the path of the file “nsinstallation”. A standard user could potentially create a symlink of the file “nsinstallation” to escalate the privileges of a different file on the system. This issue affects Netskope Client: before 123.0, before 117.1.11.2310, before 120.1.10.2306.

Affected products (as reported)

Vendor	Product	Versions
Netskope	Netskope Client	0 – before 123.00 – before 117.1.11.23100 – before 120.1.10.2306

Weakness: CWE-610 · Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H

References

https://support.netskope.com/s/article/Netskope-Security-Advisory-Netskope-Client-installer-with-symbolic-link-following-vulnerability-leading-to-privilege-escalation