CVE-2020-8884
HIGHProofpoint Insider Threat Mgmt <7.9 - Code Injection
Title source: llmDescription
rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT Windows Agent) before 7.9 allows remote authenticated users to execute arbitrary code as SYSTEM because of improper deserialization over named pipes.
Scores
CVSS v3
8.8
EPSS
0.1108
EPSS Percentile
93.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-502
Status
published
Affected Products (1)
proofpoint/insider_threat_management
< 7.4.2
Timeline
Published
Jan 06, 2021
Tracked Since
Feb 18, 2026