Input validation

2023-09-1316:15:00

PRIOn knowledge base

www.prio-n.com

insider threat management

macos

certification validation

man-in-the-middle

nvd

vulnerability

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.5%

JSON

An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent network to establish a man-in-the-middle position between the agent and the ITM server after the agent has registered. All versions prior to 7.14.3.69 are affected. Agents for Windows, Linux, and Cloud are unaffected.

CPENameOperatorVersion
insider_threat_managementlt7.14.3.69

CPE	Name	Operator	Version
	insider_threat_management	lt	7.14.3.69

References

www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-0006

www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-006