Security Advisory

CVE-2021-44862

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-11-03 19:20:41
Last updated 2025-05-02 18:47:57
Assigner Netskope
CVSS score 8.4
State PUBLISHED

Description

Netskope client is impacted by a vulnerability where an authenticated, local attacker can view sensitive information stored in NSClient logs which should be restricted. The vulnerability exists because the sensitive information is not masked/scrubbed before writing in the logs. A malicious user can use the sensitive information to download data and impersonate another user.