VulnerabilityModified

CVE-2023-36002

A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to smuggle content via DNS lookups.

MEDIUM 4.3EPSS 0.25%

Does this matter?

Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.

Description

A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to smuggle content via DNS lookups. All versions before 7.14.3 are affected.

CVSS 3.1: 4.3 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.25% probability · 17th percentile
CISA KEV: Not listed
Weakness: CWE-862
Affected: proofpoint/insider threat management server
Source: security@proofpoint.com

References

https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-005Not Applicable
https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-0004Vendor Advisory
https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-005Not Applicable

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.