CVE-2024-7402

Netskope Client Configuration Tampering with Local MITM

State
Published
Severity
7.0 High
Published
Aug 14, 2025
Updated
Aug 15, 2025
Reserved
Aug 2, 2024

Read the record on cve.org

Description

Netskope has identified a potential gap in its agent (Netskope Client) in which a malicious insider can potentially tamper the Netskope Client configuration by performing MITM (Man-in-the-Middle) activity on the Netskope Client communication channel. A successful exploitation would require administrative privileges on the machine, and could result in temporarily altering the configuration of Netskope Client or permanently disabling or removing the agent from the machine.

Scores

CVSSScoreVectorSource
4.07.0 HighCVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:H/SA:HNetskope

Weaknesses

Affected Products

ProductVersions
Netskope ClientNetskope
  • before 123.0.16, 126.0.9, 129.0.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.