CVE-2020-10655
First published: Wed Jan 06 2021(Updated: )
The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteWindowMouse API. The vulnerability allows an anonymous remote attacker to execute arbitrary code with local administrator privileges. The vulnerability is caused by improper deserialization.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Proofpoint Insider Threat Management Server | <7.9.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-10655?
CVE-2020-10655 is a vulnerability in the Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before version 7.9.1 that allows an anonymous remote attacker to execute arbitrary code with local administrator privileges.
What is the severity of CVE-2020-10655?
CVE-2020-10655 has a severity score of 9.8, which is considered critical.
How can I fix the CVE-2020-10655 vulnerability?
To fix the CVE-2020-10655 vulnerability, you should update the Proofpoint Insider Threat Management Server to version 7.9.1 or later.
What is the Common Weakness Enumeration (CWE) for CVE-2020-10655?
The Common Weakness Enumeration (CWE) for CVE-2020-10655 is CWE-502.
Where can I find more information about CVE-2020-10655?
You can find more information about CVE-2020-10655 on the Proofpoint website and their security advisories.
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/proofpoint
- canonical/proofpoint insider threat management server