Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-44862

Опубликовано: 03 нояб. 2022
Источник: nvd
CVSS3: 8.4
CVSS3: 7.8
EPSS Низкий

Описание

Netskope client is impacted by a vulnerability where an authenticated, local attacker can view sensitive information stored in NSClient logs which should be restricted. The vulnerability exists because the sensitive information is not masked/scrubbed before writing in the logs. A malicious user can use the sensitive information to download data and impersonate another user.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:netskope:netskope:*:*:*:*:*:*:*:*
Версия до 91 (включая)

EPSS

Процентиль: 16%
0.0005
Низкий

8.4 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-532
CWE-532

Связанные уязвимости

CVSS3: 7.8
github
больше 3 лет назад

Netskope client is impacted by a vulnerability where an authenticated, local attacker can view sensitive information stored in NSClient logs which should be restricted. The vulnerability exists because the sensitive information is not masked/scrubbed before writing in the logs. A malicious user can use the sensitive information to download data and impersonate another user.

EPSS

Процентиль: 16%
0.0005
Низкий

8.4 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-532
CWE-532