Lucene search

ProofpointCVE-2023-4801

HistorySep 13, 2023 - 4:15 p.m.

CVE-2023-4801

2023-09-1316:15:10

CWE-295

Proofpoint

web.nvd.nist.gov

cve-2023-4801

insider threat management

itm

macos

certification validation

vulnerability

nvd

security

patch

update

CVSS3

7.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

21.5%

JSON

An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent network to establish a man-in-the-middle position between the agent and the ITM server after the agent has registered. All versions prior to 7.14.3.69 are affected. Agents for Windows, Linux, and Cloud are unaffected.

Affected configurations

Nvd

Node

proofpointinsider_threat_managementRange<7.14.3.69macos

VendorProductVersionCPE
proofpointinsider_threat_management*cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:macos:*:*

Vendor	Product	Version	CPE
proofpoint	insider_threat_management	*	cpe:2.3:a:proofpoint:insider_threat_management::::::macos::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Agent"
    ],
    "platforms": [
      "MacOS"
    ],
    "product": "Insider Threat Management",
    "vendor": "Proofpoint",
    "versions": [
      {
        "changes": [
          {
            "at": "7.14.3.69",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "7.14.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

References

www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-0006

www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-006

CVSS3

7.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

21.5%

JSON

Related for CVE-2023-4801