QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-13177

Back to search

CVE-2024-13177

Published: Apr 15, 2025

Modified: Apr 15, 2025

PUBLISHED

Description

Netskope Client on Mac OS is impacted by a vulnerability in which the postinstall script does not properly validate the path of the file “nsinstallation”. A standard user could potentially create a symlink of the file “nsinstallation” to escalate the privileges of a different file on the system. This issue affects Netskope Client: before 123.0, before 117.1.11.2310, before 120.1.10.2306.

VendorProductVersions

Netskope

Netskope Client

affected
0 - < 123.0
affected
0 - < 117.1.11.2310
affected
0 - < 120.1.10.2306

Weaknesses (CWE)

CWE-610

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now