CVE-2024-7402
Netskope Client Configuration Tampering with Local MITM
- State
- Published
- Severity
- 7.0 High
- Published
- Aug 14, 2025
- Updated
- Aug 15, 2025
- Reserved
- Aug 2, 2024
Description
Netskope has identified a potential gap in its agent (Netskope Client) in which a malicious insider can potentially tamper the Netskope Client configuration by performing MITM (Man-in-the-Middle) activity on the Netskope Client communication channel. A successful exploitation would require administrative privileges on the machine, and could result in temporarily altering the configuration of Netskope Client or permanently disabling or removing the agent from the machine.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.0 High | CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:H/SA:H | Netskope |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Netskope ClientNetskope |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.