CVE-2024-7401

Netskope was notified about a security gap in Netskope Client enrollment process where NSClient is using a static token “Orgkey” as authentication parameter. Since this is a static token, if leaked, cannot be rotated or revoked. A malicious actor can use this token to enroll NSClient from a customer’s tenant and impersonate a user.

• CWE-287
• CWE-287

• https://docs.netskope.com/en/secure-enrollment/Product
• https://quickskope.com/
• https://www.netskope.com/company/security-compliance-and-assurance/security-advisories-and-disclosures/netskope-security-advisory-nskpsa-2024-001Vendor Advisory

Published

Aug 26, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-7395An authentication bypass vulnerability in Korenix JetPort 56…9.3
• CVE-2024-7396Missing encryption of sensitive data in Korenix JetPort 5601…7.1
• CVE-2024-7397Improper filering of special characters result in a command …9.3
• CVE-2024-7398Concrete CMS versions 9 through 9.3.3 and versions below 8.5…5.4
• CVE-2024-7399Improper limitation of a pathname to a restricted directory …9.8
• CVE-2024-7400The vulnerability potentially allowed an attacker to misuse …8.5
• CVE-2024-7402Netskope has identified a potential gap in its agent (Netsko…7
• CVE-2024-7403Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-7404An issue was discovered in GitLab CE/EE affecting all versio…6.5
• CVE-2024-7407Use of a custom password encoding algorithm in Streamsoft Pr…8.2
• CVE-2024-7408This vulnerability exists in Airveda Air Quality Monitor PM2…6.5
• CVE-2024-7409A flaw was found in the QEMU NBD Server. This vulnerability …7.5