CVE-2023-35998: medium-severity vulnerability in Proofpoint Insider Threat Management
ITM Server Missing Authorization in SOAP Endpoints
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.6epss 0.2%
A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on an adjacent network to read and write unauthorized objects. Successful exploitation requires an attacker to first obtain a valid agent authentication token. All versions before 7.14.3 are affected.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Affected products
Proofpoint · Insider Threat ManagementRelated CVEs — Proofpoint Insider Threat Management
In the same product, most dangerous first.
CVE-2023-36000MEDIUMITM Server Missing Authorization for Agent ConfigEPSS 0.3%CVE-2023-36002MEDIUMITM Server Missing Authorization for URL validationEPSS 0.3%CVE-2023-4801HIGHITM MacOS Agent Improper Certificate ValidationEPSS 0.3%CVE-2023-2818MEDIUMITM Windows Agent Insecure Filesystem PermissionsEPSS 0.2%