CVE-2020-28845

概要

参考情報

• the-it-wonders.blogspot.com/2020/11/netskope-csv-injection-in-admin-ui.html · Exploit

netskope のその他の脆弱性

• CVE-2023-4996高 8.8Netskope was made aware of a security vulnerability in its NSClient product for version 100 & prior where a malicious non-admin user can dis…
• CVE-2022-4149高 7.0The Netskope client service (prior to R96) on Windows runs as NT AUTHORITY\SYSTEM which writes log files to a writable directory (C:\Users\P…
• CVE-2023-2270高 7.8The Netskope client service running with NT\SYSTEM privileges accepts network connections from localhost to start various services and execu…
• CVE-2021-44862高 7.8Netskope client is impacted by a vulnerability where an authenticated, local attacker can view sensitive information stored in NSClient logs…
• CVE-2021-41388高 7.8Netskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability. The XPC implementation of nsAuxiliarySvc p…