CVE-2020-10656
First published: Wed Jan 06 2021(Updated: )
The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteWindowMouseWithChunksV2 API. The vulnerability allows an anonymous remote attacker to execute arbitrary code with local administrator privileges. The vulnerability is caused by improper deserialization.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Proofpoint | <7.9.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-10656?
CVE-2020-10656 is a vulnerability in the Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before version 7.9.1.
What is the severity of CVE-2020-10656?
The severity of CVE-2020-10656 is critical, with a severity value of 9.8.
How does CVE-2020-10656 affect Proofpoint Insider Threat Management Server?
CVE-2020-10656 allows an anonymous remote attacker to execute arbitrary code with local administrator privileges on the Proofpoint Insider Threat Management Server before version 7.9.1.
How can I fix CVE-2020-10656?
To fix CVE-2020-10656, you should upgrade the Proofpoint Insider Threat Management Server to version 7.9.1 or later.
Where can I find more information about CVE-2020-10656?
More information about CVE-2020-10656 can be found on the Proofpoint blog and the Proofpoint security advisories page.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/proofpoint
- canonical/proofpoint