CVE-2023-36000

MEDIUM

Insider Threat Management Server <7.14.3 - Info Disclosure

Title source: llm

Description

A missing authorization check in the MacOS agent configuration endpoint of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to obtain sensitive information. Successful exploitation requires an attacker to first obtain a valid agent authentication token. All versions before 7.14.3 are affected.

References (2)

Core 2

Core References

Not Applicable

https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-005

Vendor Advisory

https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-0004

Scores

CVSS v3 6.5

EPSS 0.0031

EPSS Percentile 22.8%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-862

Status published

Products (1)

proofpoint/insider_threat_management_server < 7.14.3

Published Jun 27, 2023

Tracked Since Feb 18, 2026