Skip to content
OpenAdvisories
High WID-SEC-2023-2339 4 CVEs

Proofpoint Insider Threat Management: Mehrere Schwachstellen

Published Sep 13, 2023 · Updated Sep 14, 2023 · Revision 2 · de-DE

Vendor: Proofpoint Product: Insider Threat Management < 7.14.3.69 Platform: Linux Platform: Windows

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Proofpoint Insider Threat Management ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder Dateien zu manipulieren.

Product

Proofpoint Insider Threat Management (ITM) ist eine Lösung zur Abwehr von Insider-Bedrohungen.

Vulnerabilities 4

  • High 7.5
    CVE-2023-4801

    ITM MacOS Agent Improper Certificate Validation

    An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent network to establish a man-in-the-middle position between the agent and the ITM server after the agent…

    Proofpoint Insider Threat Management
  • Medium 6.4
    CVE-2023-4828

    ITM Server Communications Hijack

    An improper check for an exceptional condition in the Insider Threat Management (ITM) Server could be used by an attacker to change the server's configuration of any already-registered agent so that the agent sends all future communications to an attacker-cho…

    Proofpoint ITM Server
  • Medium 4.8
    CVE-2023-4802

    ITM Server Cross-site Scripting in UpdateInstalledSoftware Endpoint

    A reflected cross-site scripting vulnerability in the UpdateInstalledSoftware endpoint of the Insider Threat Management (ITM) Server's web console could be used by an authenticated administrator to run arbitrary javascript within another web console administr…

    Proofpoint ITM Server
  • Medium 4.8
    CVE-2023-4803

    ITM Server Cross-site Scripting in WriteWindowTitle Endpoint

    A reflected cross-site scripting vulnerability in the WriteWindowTitle endpoint of the Insider Threat Management (ITM) Server's web console could be used by an authenticated administrator to run arbitrary javascript within another web console administrator's …

    Proofpoint ITM Server

Revision history

  1. #2

    Neue Updates von Proofpoint aufgenommen

  2. #1

    Initiale Fassung

References