Security Advisory

CVE-2019-12091

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-09-26 15:18:00

Last updated 2024-08-04 23:10:30

Assigner airbus

State PUBLISHED

Description

The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NTSYSTEM privilege, accepts network connections from localhost. The connection handling function in this service suffers from command injection vulnerability. Local users can use this vulnerability to execute code with NTSYSTEM privilege.

← Browse all CVEs View on cve.org ↗