Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fj9m-2hq3-2ghm

Опубликовано: 13 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent network to establish a man-in-the-middle position between the agent and the ITM server after the agent has registered. All versions prior to 7.14.3.69 are affected. Agents for Windows, Linux, and Cloud are unaffected.

An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent network to establish a man-in-the-middle position between the agent and the ITM server after the agent has registered. All versions prior to 7.14.3.69 are affected. Agents for Windows, Linux, and Cloud are unaffected.

EPSS

Процентиль: 25%
0.00084
Низкий

7.5 High

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 7.5
nvd
больше 2 лет назад

An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent network to establish a man-in-the-middle position between the agent and the ITM server after the agent has registered. All versions prior to 7.14.3.69 are affected. Agents for Windows, Linux, and Cloud are unaffected.

CVSS3: 7.5
fstec
больше 2 лет назад

Уязвимость программного средства обнаружения и предотвращения угроз Proofpoint Insider Threat Management для операционной системы MacOS, связанная с некорректным подтверждением подлинности сертификата, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 25%
0.00084
Низкий

7.5 High

CVSS3

Дефекты

CWE-295