CVE-2021-44862: Netskope
High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.
Netskope client is impacted by a vulnerability where an authenticated, local attacker can view sensitive information stored in NSClient logs which should be restricted. The vulnerability exists because the sensitive information is not masked/scrubbed before writing in the logs. A malicious user can use the sensitive information to download data and impersonate another user.
Affected products
- Netskope Netskope: up to and including 91
Published 2022-11-03. Last modified 2026-06-17.