First published: Tue Jun 27 2023(Updated: )
An insecure filesystem permission in the Insider Threat Management Agent for Windows enables local unprivileged users to disrupt agent monitoring. All versions prior to 7.14.3 are affected. Agents for MacOS and Linux and Cloud are unaffected.
Credit: security@proofpoint.com
Affected Software | Affected Version | How to fix |
---|---|---|
Proofpoint Insider Threat Management Windows | <7.14.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2023-2818.
The title of this vulnerability is 'An insecure filesystem permission in the Insider Threat Management Agent for Windows enables local unprivileged users to disrupt agent monitoring.'
The affected software is the Insider Threat Management Agent for Windows, all versions prior to 7.14.3.
The severity of this vulnerability is medium with a severity value of 5.5.
To fix this vulnerability, update the Insider Threat Management Agent for Windows to version 7.14.3 or later.