CVE-2021-27899

CVE-2021-27899 affects Proofpoint Insider Threat Management Agents for macOS and Linux, where improper validation of the ITM Server certificate enables a remote attacker to perform a man‑in‑the‑middle attack and intercept/alter communications. All versions prior to 7.11.1 are affected; agents for...

CVE-2021-22157

Proofpoint Insider Threat Management Server formerly ObserveIT Server before 7.11.1 allows stored XSS...

CVE-2021-22157

CVE-2021-22157 affects Proofpoint Insider Threat Management Server (formerly ObserveIT Server) prior to version 7.11.1 and allows stored cross-site scripting (XSS). The connected documents consistently describe the same issue across multiple sources; no detailed exploit vectors or remediation are...

Proofpoint Insider Threat Management Server Cross-site Scripting Vulnerability

Proofpoint Insider Threat Management Server is a server-side application from Proofpoint, Inc. for preventing malicious operations by enterprise insiders. A cross-site scripting vulnerability exists in Proofpoint Insider Threat Management Server versions prior to 7.11.1, which allows for the...

Proofpoint Insider Threat Management Server code-related vulnerabilities

Proofpoint Insider Threat Management Server is a server-side application from Proofpoint, Inc. for preventing malicious operations by enterprise insiders. An XML external entity injection vulnerability exists in Proofpoint Insider Threat Management Server versions prior to 7.11.1. An attacker cou...

Proofpoint Insider Threat Management Server security vulnerability

Proofpoint Insider Threat Management Server is a server-side application from Proofpoint, Inc. for preventing malicious operations by enterprise insiders. An authorization bypass vulnerability exists in Proofpoint Insider Threat Management Server versions prior to 7.11.1, which stems from the...

Proofpoint Insider Threat Management Server: Vulnerability in Trust Management

Proofpoint Insider Threat Management Server is a server-side application from Proofpoint, Inc. that is used to prevent malicious operations by enterprise insiders. A security vulnerability exists in Proofpoint Insider Threat Management Agents that stems from performing improper validation of ITM...

CVE-2021-27900: Missing Authorization

The Proofpoint Insider Threat Management Server formerly ObserveIT Server is missing an authorization check on several pages in the Web Console. This enables a view-only user to change any configuration setting and delete any registered agents. All versions before 7.11.1 are affected...

CVE-2021-27899: Improper Certificate Validation

The Proofpoint Insider Threat Management Agents formerly ObserveIT Agent for MacOS and Linux perform improper validation of the ITM Server's certificate, which enables a remote attacker to intercept and alter these communications using a man-in-the-middle attack. All versions before 7.11.1 are...

CVE-2021-22158: Improper Restriction of XML External Entity Reference

The Proofpoint Insider Threat Management Server formerly ObserveIT Server is vulnerable to XML external entity XXE injection in the Web Console. The vulnerability requires admin user privileges and knowledge of the XML file's encryption key to successfully exploit. All versions before 7.11 are...

CVE-2021-22157: Improper Neutralization of Input During Web Page Generation

Proofpoint Insider Threat Management Server formerly ObserveIT Server before 7.11.1 allows stored XSS...

PT-2021-14878

Name of the Vulnerable Software and Affected Versions: Proofpoint Insider Threat Management Server versions prior to 7.11 Description: The issue is related to XML external entity XXE injection in the Web Console, which requires admin user privileges and knowledge of the XML file's encryption key ...

PT-2021-14877

Name of the Vulnerable Software and Affected Versions: Proofpoint Insider Threat Management Server versions prior to 7.11.1 Description: The issue allows for stored XSS. Recommendations: For versions prior to 7.11.1, update to version 7.11.1 or later to resolve the issue...

PT-2021-17653

Name of the Vulnerable Software and Affected Versions: Proofpoint Insider Threat Management Agents versions prior to 7.11.1 Description: The issue allows a remote attacker to intercept and alter communications between the Proofpoint Insider Threat Management Agents and the ITM Server using a...

PT-2021-17654

Name of the Vulnerable Software and Affected Versions: Proofpoint Insider Threat Management Server versions prior to 7.11.1 Description: The issue is related to a missing authorization check on several pages in the Web Console of the Proofpoint Insider Threat Management Server. This allows a...

CopperStealer Malware Targets Facebook and Instagram Business Accounts

A malware that until now has gone undocumented has been quietly hijacking online accounts of advertisers and users of Facebook, Apple, Amazon, Google and other web giants since July 2019 and then using them for nefarious activity, researchers have found. Dubbed CopperStealer, the malware acts...

CVE-2021-22159

Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint Insider Threat Management formerly ObserveIT Agent for Windows before 7.4.3, 7.5.4, 7.6.5, 7.7.5, 7.8.4, 7.9.3, 7.10.2, and 7.11.0.25 as well as versions 7.3 and earlier is missing authentication for a...

Privilege escalation

Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint Insider Threat Management formerly ObserveIT Agent for Windows before 7.4.3, 7.5.4, 7.6.5, 7.7.5, 7.8.4, 7.9.3, 7.10.2, and 7.11.0.25 as well as versions 7.3 and earlier is missing authentication for a...

CVE-2021-22159

Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint Insider Threat Management formerly ObserveIT Agent for Windows before 7.4.3, 7.5.4, 7.6.5, 7.7.5, 7.8.4, 7.9.3, 7.10.2, and 7.11.0.25 as well as versions 7.3 and earlier is missing authentication for a...

CVE-2021-22159

CVE-2021-22159 affects Proofpoint Insider Threat Management (formerly ObserveIT) Agent for Windows; versions before 7.4.3, 7.5.4, 7.6.5, 7.7.5, 7.8.4, 7.9.3, 7.10.2, and 7.11.0.25 (as well as 7.3 and earlier) are missing authentication for a critical function, enabling a local authenticated Windo...