Netskope Client Privilege Escalation Vulnerability on Mac OS

A privilege escalation vulnerability has been identified in the Netskope Client for Mac OS. The issue arises because the postinstall script fails to properly validate the path of the 'nsinstallation' file. This flaw allows a standard user to create a symbolic link of 'nsinstallation' to escalate the privileges of another file on the system. The vulnerability affects Netskope Client versions prior to 123.0, prior to 117.1.11.2310, and prior to 120.1.10.2306.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation on the affected system.