CVE-2023-4996: Local privilege escalation
Netskope was made aware of a security vulnerability in its NSClient product for version 100 & prior where a malicious non-admin user can disable the Netskope client by using a specially-crafted package. The root cause of the problem was a user control code when called by a Windows ServiceController did not validate the permissions associated with the user before executing the user control code. This user control code had permissions to terminate the NSClient service.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-4996?
CVE-2023-4996 is a vulnerability that allows a malicious non-admin user to disable the Netskope client by using a specially-crafted package.
How does CVE-2023-4996 affect Netskope NSClient?
CVE-2023-4996 affects Netskope NSClient version 100 and prior, allowing a malicious non-admin user to disable the client.
What is the root cause of CVE-2023-4996?
The root cause of CVE-2023-4996 is a user control code issue when called by a Windows ServiceController.
Is Microsoft Windows affected by CVE-2023-4996?
No, Microsoft Windows is not vulnerable to CVE-2023-4996.
How severe is CVE-2023-4996?
CVE-2023-4996 has a severity rating of 8.8 (high).
How can I fix CVE-2023-4996?
To fix CVE-2023-4996, update Netskope NSClient to version 101 or later.