{"id":"CVE-2024-7401","state":"PUBLISHED","title":"Client Enrollment Process Bypass","description":"Netskope was notified about a security gap in Netskope Client enrollment process where NSClient is using a static token “Orgkey” as authentication parameter. Since this is a static token, if leaked, cannot be rotated or revoked. A malicious actor can use this token to enroll NSClient from a customer’s tenant and impersonate a user.","publishedAt":"2024-08-26T16:36:40.915Z","updatedAt":"2025-07-23T11:02:11.214Z","severity":{"score":8.5,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:H/SI:H/SA:L/AU:Y/U:Red","source":"Netskope"},"assigner":"Netskope","products":["Netskope Netskope Client"],"affected":[{"vendor":"Netskope","product":"Netskope Client","packageName":"Netskope Client","defaultStatus":"unaffected","versions":[{"version":"All","status":"unknown"}]}],"references":["https://www.netskope.com/company/security-compliance-and-assurance/security-advisories-and-disclosures/netskope-security-advisory-nskpsa-2024-001","https://docs.netskope.com/en/secure-enrollment/","https://quickskope.com/"],"weaknesses":["CWE-287"],"ingestedAt":"2026-10-29T20:08:20.985Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/7xxx/CVE-2024-7401.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-7401","state":"PUBLISHED","datePublished":"2024-08-26T16:36:40.915Z","dateUpdated":"2025-07-23T11:02:11.214Z","assignerShortName":"Netskope","assignerOrgId":"bf992f6a-e49d-4e94-9479-c4cff32c62bc","dateReserved":"2024-08-02T07:20:21.411Z"},"containers":{"cna":{"title":"Client Enrollment Process Bypass","descriptions":[{"lang":"en","value":"Netskope was notified about a security gap in Netskope Client enrollment process where NSClient is using a static token “Orgkey” as authentication parameter. Since this is a static token, if leaked, cannot be rotated or revoked. A malicious actor can use this token to enroll NSClient from a customer’s tenant and impersonate a user."}],"affected":[{"vendor":"Netskope","product":"Netskope Client","packageName":"Netskope Client","defaultStatus":"unaffected","versions":[{"version":"All","status":"unknown"}]}],"references":[{"url":"https://www.netskope.com/company/security-compliance-and-assurance/security-advisories-and-disclosures/netskope-security-advisory-nskpsa-2024-001","tags":["vendor-advisory"]},{"url":"https://docs.netskope.com/en/secure-enrollment/","tags":["patch"]},{"url":"https://quickskope.com/","tags":["exploit"]}],"metrics":[{"cvssV4_0":{"Automatable":"YES","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":8.5,"baseSeverity":"HIGH","privilegesRequired":"LOW","providerUrgency":"RED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:H/SI:H/SA:L/AU:Y/U:Red","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-287","description":"CWE-287 Improper Authentication","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Netskope","orgId":"bf992f6a-e49d-4e94-9479-c4cff32c62bc","dateUpdated":"2025-07-23T11:02:11.214Z"},"credits":[{"lang":"en","type":"finder","value":"Sander di Wit"}],"datePublic":"2024-08-26T16:00:00.000Z","exploits":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Netskope has received isolated reports of abuse of this known exploit by Bug Bounty hunters. Netskope is happy to help customers detect any abuse and help them contain and remediate the incident, if any."}],"value":"Netskope has received isolated reports of abuse of this known exploit by Bug Bounty hunters. Netskope is happy to help customers detect any abuse and help them contain and remediate the incident, if any."}],"impacts":[{"capecId":"CAPEC-115","descriptions":[{"lang":"en","value":"CAPEC-115 Authentication Bypass"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Netskope has fixed the gap and recommends customers to review their deployments of Netskope Client and enable the fix in their tenants. Here is the detailed guide - <a target=\"_blank\" rel=\"nofollow\" href=\"https://docs.netskope.com/en/secure-enrollment/\">https://docs.netskope.com/en/secure-enrollment/</a> <br>"}],"value":"Netskope has fixed the gap and recommends customers to review their deployments of Netskope Client and enable the fix in their tenants. Here is the detailed guide -  https://docs.netskope.com/en/secure-enrollment/"}],"source":{"advisory":"NSKPSA-2024-001","discovery":"USER"},"workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"There is no countermeasure available to remediate the gap without enabling Secure Enrollment, but follow the below steps to minimize the risk: <br><ul><li>Enable device compliance and device classification</li><li>Create a policy to block all traffic for the devices which are not meeting the device compliance checks and are not falling under proper device classification.</li></ul>"}],"value":"There is no countermeasure available to remediate the gap without enabling Secure Enrollment, but follow the below steps to minimize the risk: \n  *  Enable device compliance and device classification\n  *  Create a policy to block all traffic for the devices which are not meeting the device compliance checks and are not falling under proper device classification."}],"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-08-26T17:34:17.761636Z","id":"CVE-2024-7401","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-26T17:35:05.399Z"}}]}}}