CVE-2021-41388

Netskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability

published January 4, 2022

CVSS
—
EPSS
0%
Percentile
12.8
In the wild
Unconfirmed
What it is

Netskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability. The XPC implementation of nsAuxiliarySvc process does not perform validation on new connections before accepting the connection. Thus any low privileged user can connect and call external methods defined in XPC service as root, elevating their privilege to the highest level.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00228 · 12.8th percentile
Published
2022-01-04T21:34Z
EPSS history
Timeline
  • 04 JAN 21:34Z
    Netskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability
    cvelistv5