Netskope Client Privilege Escalation Vulnerability via Rogue Server

A local privilege escalation vulnerability has been identified in the Netskope Client, affecting versions R128 and prior. The issue arises from insufficient validation of the server connection endpoint, allowing the client to connect to any server with Public Signed CA TLS certificates. Local users can exploit this flaw by sending specially crafted responses to elevate privileges on the system.

Impact

Exploitation of this vulnerability allows local users to escalate privileges to the SYSTEM level on the affected machine.

Remediation

Netskope has released a patch for this vulnerability in version R129. Customers are advised to upgrade to this version or higher. For download instructions, visit the Netskope Support page.