Описание
A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to smuggle content via DNS lookups. All versions before 7.14.3 are affected.
Уязвимые конфигурации
Конфигурация 1Версия до 7.14.3 (исключая)
cpe:2.3:a:proofpoint:insider_threat_management_server:*:*:*:*:*:*:*:*
EPSS
Процентиль: 21%
0.00066
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-862
CWE-862
Связанные уязвимости
CVSS3: 4.3
github
больше 2 лет назад
A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to smuggle content via DNS lookups. All versions before 7.14.3 are affected.
EPSS
Процентиль: 21%
0.00066
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-862
CWE-862