CVE-2024-13177
Medium
Description
Netskope Client on Mac OS is impacted by a vulnerability in which the postinstall script does not properly validate the path of the file “nsinstallation”. A standard user could potentially create a symlink of the file “nsinstallation” to escalate the privileges of a different file on the system. This issue affects Netskope Client: before 123.0, before 117.1.11.2310, before 120.1.10.2306.
SeverityMedium
CVSS5.2
Exploit probability—
ProductNetskope Client
PublishedApr 15, 2025
First seenApr 15, 2025
Weakness typeCWE-610CWE-610
How to fix
Update
- Netskope Netskope Client123.0, 117.1.11.2310, 120.1.10.2306 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Netskope Netskope Client | v < 123.0, v < 117.1.11.2310, v < 120.1.10.2306 | 123.0, 117.1.11.2310, 120.1.10.2306 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.