A missing authorization check in the MacOS agent configuration endpoint of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to obtain sensitive information. Successful exploitation requires an attacker to first obtain a valid agent authentication token. All versions before 7.14.3 are affected.
References
Link | Resource |
---|---|
https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-0004 | Vendor Advisory |
https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-005 | Not Applicable |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: Proofpoint
Published: 2023-06-27T14:32:01.270Z
Updated: 2023-06-27T14:32:01.270Z
Reserved: 2023-06-20T20:19:49.398Z
Link: CVE-2023-36000
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-06-27T15:15:11.013
Modified: 2023-07-06T16:12:03.343
Link: CVE-2023-36000
JSON object: View
Redhat Information
No data.
CWE