CVE-2025-0309
Last modified
CVE-2025-0309 is a medium-severity vulnerability rated 6/10 on the CVSS scale. An insufficient validation on the server connection endpoint in Netskope Client allows local users to elevate privileges on the system. The insufficient validation allows Netskope Client to connect to any other server with Public Signed CA TLS certificates and send specially crafted responses to elevate privileges.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
An insufficient validation on the server connection endpoint in Netskope Client allows local users to elevate privileges on the system. The insufficient validation allows Netskope Client to connect to any other server with Public Signed CA TLS certificates and send specially crafted responses to elevate privileges.
Metrics
CVSS:4.0/AV:P/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-0309?
How severe is CVE-2025-0309?
How do I fix CVE-2025-0309?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-0303in OpenHarmony v4.1.2 and prior versions allow a local attac…7.8
- CVE-2025-0304in OpenHarmony v4.1.2 and prior versions allow a local attac…7.8
- CVE-2025-0305Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2025-0306A vulnerability was found in Ruby. The Ruby interpreter is v…7.4
- CVE-2025-0307Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2025-0308The Ultimate Member – User Profile, Registration, Login, Mem…7.5
- CVE-2025-0311The Orbit Fox by ThemeIsle plugin for WordPress is vulnerabl…5.4
- CVE-2025-0312A vulnerability in ollama/ollama versions <=0.3.14 allows a …7.5
- CVE-2025-0313Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID NUMBER.…
- CVE-2025-0314An issue has been discovered in GitLab CE/EE affecting all v…6.1
- CVE-2025-0315A vulnerability in ollama/ollama <=0.3.14 allows a malicious…7.5
- CVE-2025-0316The WP Directorybox Manager plugin for WordPress is vulnerab…9.8
Are you affected by CVE-2025-0309?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST