Intelligent Security Service Edge (SSE), Cloud Access Security Broker (CASB), Cloud Firewall, Next Generation Secure Web Gateway (SWG), and Private Access for ZTNA built natively into a single solution to help every business on its journey to Secure Access Service Edge (SASE) architecture.

Netskope Borderless SD-WAN offers an architecture that converges zero trust principles and assured application performance to provide unprecedented secure, high-performance connectivity for every site, cloud, remote user, and IoT device.

Read the article

Netskope NewEdge is the world’s largest, highest-performing security private cloud and provides customers with unparalleled service coverage, performance and resilience.

Learn about NewEdge

Plan your path toward a faster, more secure, and more resilient network designed for the applications and users that you support.

Get the white paper

The Netskope Cloud Exchange (CE) provides customers with powerful integration tools to leverage investments across their security posture.

Learn about Cloud Exchange

Learn about NewEdge

Lighted highway through mountainside switchbacks

Learn how we secure generative AI use

Learn about Zero Trust

Learn about Industry Solutions

Leveling Up the SASE Conversation
Robert Arandjelovic and Gerry Plaza sit down to chat with Max Havey about how embracing a SASE journey can help bring networking and security teams closer together.

Play the podcast

How Netskope can enable the Zero Trust and SASE journey through security service edge (SSE) capabilities.

Read the blog

Join us for the fourth annual SASE Week, September 26-28.

Get on the guest list

Explore the security side of SASE, the future of network and protection in the cloud.

Learn about Security Service Edge

See our Customers

Woman smiling with glasses looking out window

Learn about Professional Services

Go to the Netskope Community

Learn about Training and Certifications

Netskope is proud to participate in Vision 2045: an initiative aimed to raise awareness on private industry’s role in sustainability.

Find out more

Supporting Sustainability Through Data Security

Netskope recognized as a Leader in the 2023 Gartner® Magic Quadrant™ for Security Service Edge.

Get the report

Meet our team

Group of hikers scaling a snowy mountain

Learn about Netskope Partners

Group of diverse young professionals smiling

Netskope Security Advisory NSKPSA-2022-001

Sensitive information stored in logs for NSclient

Security Advisory ID: NSKPSA-2022-001
Severity Rating: High
First Communicated: Mar 21, 2022
Overall CVSS Score: 8.4
Version: 1.0

Description
Netskope client is impacted by a vulnerability where an authenticated, local attacker can view sensitive information stored in NSClient logs which should be restricted. The vulnerability exists because the sensitive information is not masked/scrubbed before writing in the logs. A malicious user can use the sensitive information to download data and impersonate another user.
CWE-532: Insertion of Sensitive Information into Log File

Affected Product(s) and Version(s)
Netskope Client vR91 and Prior

CVE-ID(s)
CVE-2021-44862

Remediation
Netskope has patched this vulnerability and released a new version. All customers
are recommended to upgrade their NSClients to the latest version. To download
latest version, please refer to download Instructions at Download Netskope Client and Scripts – Netskope Support.

Netskope reference
https://support.netskope.com/s/article/NSKPSA-2022-001-Netskope-Security-Advisory-Sensitive-information-in-audit-logs.

Workaround
There are no workarounds for this vulnerability other than upgrading to the latest version.

General Security Best Practices
Follow the secure tenant configurations to enhance the security of tenants which are listed at https://support.netskope.com/s/article/Secure-Tenant-Configuration.

Special Notes and Acknowledgement
Netskope credits Ben O’Dea and Josh Wilson from IAG Australia for reporting this vulnerability.

Exploitation and Public Disclosures
Netskope is not aware of any public exploitation or disclosures before this date.

Revision History

Version	Date	Section	Notes
1.0	Mar 21, 2022		Initial Disclosure

Legal Disclaimer
To the maximum extent permitted by applicable law, information provided in this notice is provided “as is” without warranty of any kind. Your use of the information in this notice or materials linked herein are at your own risk. This notice and all aspects of the Netskope Product Security Incident Response Policy are subject to change without notice. Response is not guaranteed for any specific issue or class of issues. Your entitlements regarding warranties, support and maintenance, including vulnerabilities in any Netskope software or service, are governed solely by the applicable master agreement between Netskope and you. The statements in this notice do not modify, enlarge or otherwise amend any of your rights under the applicable master agreement, or create any additional warranties or commitments.