Lucene search

ProofpointVULNRICHMENT:CVE-2023-4801

HistorySep 13, 2023 - 3:14 p.m.

CVE-2023-4801 ITM MacOS Agent Improper Certificate Validation

2023-09-1315:14:36

CWE-295

Proofpoint

github.com

itm

macos

agent

certification

validation

vulnerability

man-in-the-middle

adjacent network

cve-2023-4801

CVSS3

7.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent network to establish a man-in-the-middle position between the agent and the ITM server after the agent has registered. All versions prior to 7.14.3.69 are affected. Agents for Windows, Linux, and Cloud are unaffected.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:proofpoint:insider_threat_management:-:*:*:*:*:macos:*:*"
    ],
    "vendor": "proofpoint",
    "product": "insider_threat_management",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "7.14.3.69"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-006

CVSS3

7.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Related for VULNRICHMENT:CVE-2023-4801