漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Symlink Following in Netskope Client Postinstall Script
Vulnerability Description
Netskope Client on Mac OS is impacted by a vulnerability in which the postinstall script does not properly validate the path of the file “nsinstallation”. A standard user could potentially create a symlink of the file “nsinstallation” to escalate the privileges of a different file on the system. This issue affects Netskope Client: before 123.0, before 117.1.11.2310, before 120.1.10.2306.
CVSS Information
N/A
Vulnerability Type
资源在另一范围的外部可控制索引
Vulnerability Title
Netskope Client 安全漏洞
Vulnerability Description
Netskope Client是美国Netskope公司的一款用于连接管理Netskope云平台的客户端程序。 Netskope Client存在安全漏洞,该漏洞源于postinstall脚本未正确验证nsinstallation文件路径,可能导致权限提升。
CVSS Information
N/A
Vulnerability Type
N/A