漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Local privilege escalation
Vulnerability Description
Netskope was made aware of a security vulnerability in its NSClient product for version 100 & prior where a malicious non-admin user can disable the Netskope client by using a specially-crafted package. The root cause of the problem was a user control code when called by a Windows ServiceController did not validate the permissions associated with the user before executing the user control code. This user control code had permissions to terminate the NSClient service.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Vulnerability Type
权限预留不恰当
Vulnerability Title
Netskope 安全漏洞
Vulnerability Description
Netskope是美国Netskope公司的一款应用于云环境的威胁防护网关。 Netskope Client R100及之前版本存在安全漏洞，该漏洞源于Windows ServiceController 调用用户控制代码时，在执行用户控制代码之前未验证与用户关联的权限，攻击者利用该漏洞可以使用特制的软件包禁用 Netskope 客户端。
CVSS Information
N/A
Vulnerability Type
N/A