Vulnerability · Published Aug 26, 2024 · Assigned by Netskope
CVE-2024-7401Client Enrollment Process Bypass
High 8.5
In plain English
A high-severity improper authentication in Netskope Client from Netskope. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).
Official description
Netskope was notified about a security gap in Netskope Client enrollment process where NSClient is using a static token “Orgkey” as authentication parameter. Since this is a static token, if leaked, cannot be rotated or revoked. A malicious actor can use this token to enroll NSClient from a customer’s tenant and impersonate a user.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Netskope | Netskope Client | see references |
Weakness: CWE-287 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:H/SI:H/SA:L/AU:Y/U:Red