CVE-2021-44862 - CVE House
Back to Database
Status published High CVE-2021-44862

Sensitive Information store in NSClient logs

Vulnerability Description

Netskope client is impacted by a vulnerability where an authenticated, local attacker can view sensitive information stored in NSClient logs which should be restricted. The vulnerability exists because the sensitive information is not masked/scrubbed before writing in the logs. A malicious user can use the sensitive information to download data and impersonate another user.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-44862

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Netskope credits Ben O’Dea and Josh Wilson from IAG Australia for reporting this vulnerability.

References

More from Netskope

View All →
CVE-2025-5942
Heap Overflow in Netskope Endpoint DLP Driver
Medium 5.7
CVE-2025-5941
Out-of-Bounds Read Vulnerability in Netskope Client
Low 2
CVE-2025-15642
Netskope Client Service Insufficient Access Controls
Medium 6.8
CVE-2025-15641
Netskope Client Exposed IOCTL with Insufficient Access Controls
Medium 6.8
CVE-2025-15584
Endpoint DLP Driver Filter Communication Port Integer Overflow
Medium 6.8

Affected Vendor

Affected Software

NSClient
Vulnerable Versions:
91.0 and Prior

Timeline

Official Publish: November 3rd, 2022
Last Modified: May 2nd, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-532

MITRE ATT&CK TTPs

T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1555 Credentials from Password Stores
Credential Access
T1078 Valid Accounts
Persistence
T1562 Impair Defenses
Defense Evasion