CVE-2020-10658
First published: Wed Jan 06 2021(Updated: )
The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteImage API. The vulnerability allows an anonymous remote attacker to execute arbitrary code with local administrator privileges. The vulnerability is caused by improper deserialization.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Proofpoint Insider Threat Management Server | <7.9.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-10658?
CVE-2020-10658 is a vulnerability in the Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 that allows an anonymous remote attacker to execute arbitrary code with local administrator privileges.
How severe is CVE-2020-10658?
CVE-2020-10658 is rated as critical with a severity score of 9.8.
What software versions are affected by CVE-2020-10658?
CVE-2020-10658 affects Proofpoint Insider Threat Management Server versions up to and excluding 7.9.1.
How can I fix CVE-2020-10658?
To fix CVE-2020-10658, it is recommended to upgrade Proofpoint Insider Threat Management Server to version 7.9.1 or later.
Where can I find more information about CVE-2020-10658?
You can find more information about CVE-2020-10658 on the Proofpoint blog and security advisories page.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/proofpoint
- canonical/proofpoint insider threat management server