A missing authorization check in the MacOS agent configuration endpoint of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to obtain sensitive information. Successful exploitation requires an attacker to first obtain a valid agent authentication token. All versions before 7.14.3 are affected.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Proofpoint
Published: 2023-06-27T14:32:01.270Z
Updated: 2024-08-02T16:37:41.242Z
Reserved: 2023-06-20T20:19:49.398Z
Link: CVE-2023-36000
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-06-27T15:15:11.013
Modified: 2023-07-06T16:12:03.343
Link: CVE-2023-36000
Redhat
No data.