CVE-2020-8884
First published: Wed Jan 06 2021(Updated: )
rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT Windows Agent) before 7.9 allows remote authenticated users to execute arbitrary code as SYSTEM because of improper deserialization over named pipes.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Proofpoint Insider Threat Management Windows | >=6.3<7.4.2 | |
| Proofpoint Insider Threat Management Windows | >=7.5.0<7.5.3 | |
| Proofpoint Insider Threat Management Windows | >=7.6.0<7.6.4 | |
| Proofpoint Insider Threat Management Windows | >=7.7.0<7.7.4 | |
| Proofpoint Insider Threat Management Windows | >=7.8.0<7.8.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-8884?
CVE-2020-8884 is a vulnerability in the Proofpoint Insider Threat Management Windows Agent that allows remote authenticated users to execute arbitrary code as SYSTEM.
What is the severity of CVE-2020-8884?
CVE-2020-8884 has a severity rating of 8.8 (critical).
Which software versions are affected by CVE-2020-8884?
Versions 6.3 to 7.8.3 of the Proofpoint Insider Threat Management Windows Agent are affected by CVE-2020-8884.
How can remote authenticated users exploit CVE-2020-8884?
Remote authenticated users can exploit CVE-2020-8884 by improperly deserializing data over named pipes.
Are there any references for CVE-2020-8884?
Yes, you can find more information about CVE-2020-8884 in the Proofpoint blog and security advisories: <a href='https://www.proofpoint.com/us/blog' target='_blank'>https://www.proofpoint.com/us/blog</a> and <a href='https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2020-0002' target='_blank'>https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2020-0002</a>.
- collector/nvd-index
- agent/weakness
- agent/author
- agent/references
- agent/severity
- agent/description
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/proofpoint
- canonical/proofpoint insider threat management windows
- version/proofpoint insider threat management windows/6.3
- version/proofpoint insider threat management windows/7.5.0
- version/proofpoint insider threat management windows/7.6.0
- version/proofpoint insider threat management windows/7.7.0
- version/proofpoint insider threat management windows/7.8.0