Vulnerability Details : CVE-2021-44862
Netskope client is impacted by a vulnerability where an authenticated, local attacker can view sensitive information stored in NSClient logs which should be restricted. The vulnerability exists because the sensitive information is not masked/scrubbed before writing in the logs. A malicious user can use the sensitive information to download data and impersonate another user.
Products affected by CVE-2021-44862
- cpe:2.3:a:netskope:netskope:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-44862
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 14 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-44862
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.8
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST | |
|
8.4
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
2.5
|
5.9
|
Netskope |
CWE ids for CVE-2021-44862
-
The product writes sensitive information to a log file.Assigned by:
- nvd@nist.gov (Primary)
- psirt@netskope.com (Secondary)
References for CVE-2021-44862
-
https://www.netskope.com/company/security-compliance-and-assurance/security-advisories-and-disclosures/netskope-security-advisory-nskpsa-2022-001
NSKPSA-2022-001 - NetskopeVendor Advisory
Jump to