CVE-2023-4801

published 2023-09-13

CVE-2023-4801: An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent…

Priority P3 38 high 7.5 CVSS 3.1

AV A AC H PR N UI N S U C H I H A H

An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent network to establish a man-in-the-middle position between the agent and the ITM server after the agent has registered. All versions prior to 7.14.3.69 are affected. Agents for Windows, Linux, and Cloud are unaffected.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
proofpoint	insider_threat_management	< 7.14.3.69	7.14.3.69
proofpoint	insider_threat_management	<= 7.14.3	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-295