Skip to content
OpenAdvisories
Medium WID-SEC-2023-1587 3 CVEs

Proofpoint Insider Threat Management: Mehrere Schwachstellen

Published Jun 28, 2023 · Updated Jun 28, 2023 · de-DE

Vendor: Proofpoint Product: Insider Threat Management Server < 7.14.3

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Proofpoint Insider Threat Management ausnutzen, um Daten zu manipulieren oder Informationen offenzulegen.

Product

Proofpoint Insider Threat Management (ITM) ist eine Lösung zur Abwehr von Insider-Bedrohungen.

Vulnerabilities 3

  • Medium 6.5
    CVE-2023-36000

    ITM Server Missing Authorization for Agent Config

    A missing authorization check in the MacOS agent configuration endpoint of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to obtain sensitive information. Successful exploitation requires an attacker to first obtain …

    Proofpoint Insider Threat Management
  • Medium 4.6
    CVE-2023-35998

    ITM Server Missing Authorization in SOAP Endpoints

    A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on an adjacent network to read and write unauthorized objects. Successful exploitation requires an attacker to first obtain a valid agent auth…

    Proofpoint Insider Threat Management
  • Medium 4.3
    CVE-2023-36002

    ITM Server Missing Authorization for URL validation

    A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to smuggle content via DNS lookups. All versions before 7.14.3 are affected.

    Proofpoint Insider Threat Management

Revision history

  1. #1

    Initiale Fassung

References