Code injection

2023-06-2715:15:00

PRIOn knowledge base

www.prio-n.com

code injection

insider threat

windows

filesystem

permission

unprivileged users

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

An insecure filesystem permission in the Insider Threat Management Agent for Windows enables local unprivileged users to disrupt agent monitoring. All versions prior to 7.14.3 are affected. Agents for MacOS and Linux and Cloud are unaffected.

CPENameOperatorVersion
insider_threat_managementlt7.14.3

CPE	Name	Operator	Version
	insider_threat_management	lt	7.14.3

References

www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-005