First published: Tue Jun 27 2023(Updated: )
A missing authorization check in the MacOS agent configuration endpoint of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to obtain sensitive information. Successful exploitation requires an attacker to first obtain a valid agent authentication token. All versions before 7.14.3 are affected.
Credit: security@proofpoint.com
Affected Software | Affected Version | How to fix |
---|---|---|
Proofpoint Insider Threat Management Server | <7.14.3 | |
Apple macOS |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2023-36000.
The severity of CVE-2023-36000 is medium (6.5).
Proofpoint Insider Threat Management Server version up to 7.14.3 is affected by CVE-2023-36000.
CVE-2023-36000 is a vulnerability in the MacOS agent configuration endpoint of the Insider Threat Management Server that allows an anonymous attacker on an adjacent network to obtain sensitive information.
Successful exploitation of CVE-2023-36000 requires an attacker to first obtain a valid agent authentication token.