Vulnerabilities > CVE-2023-4828 - Improper Check for Unusual or Exceptional Conditions vulnerability in Proofpoint Insider Threat Management

CVSS 4.2 - MEDIUM

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

high complexity

proofpoint

CWE-754

NVD

Published: 2023-09-13

Updated: 2023-10-13

Summary

An improper check for an exceptional condition in the Insider Threat Management (ITM) Server could be used by an attacker to change the server's configuration of any already-registered agent so that the agent sends all future communications to an attacker-chosen URL. This could result in disclosure of sensitive data events from the agent about the personally identifiable information (PII) and intellectual property it monitors, and all such data could be altered or deleted before reaching the ITM Server. An attacker must first successfully obtain valid agent credentials and agent hostname. All versions prior to 7.14.3.69 are affected.

Vulnerable Configurations

Part	Description	Count
Application	Proofpoint Proofpoint Insider Threat Management 6.3 Proofpoint Insider Threat Management 7.4.2 Proofpoint Insider Threat Management 7.4.3 Proofpoint Insider Threat Management 7.5.0 Proofpoint Insider Threat Management 7.5.3 Proofpoint Insider Threat Management 7.5.4 Proofpoint Insider Threat Management 7.6.0 Proofpoint Insider Threat Management 7.6.4 Proofpoint Insider Threat Management 7.6.5 Proofpoint Insider Threat Management 7.7.0 Proofpoint Insider Threat Management 7.7.4 Proofpoint Insider Threat Management 7.7.5 Proofpoint Insider Threat Management 7.8.0 Proofpoint Insider Threat Management 7.8.3 Proofpoint Insider Threat Management 7.8.4 Proofpoint Insider Threat Management 7.9.0 Proofpoint Insider Threat Management 7.9.3 Proofpoint Insider Threat Management 7.10.0 Proofpoint Insider Threat Management 7.10.2 Proofpoint Insider Threat Management 7.10.3 Proofpoint Insider Threat Management 7.11.0.0 Proofpoint Insider Threat Management 7.11.0.25 Proofpoint Insider Threat Management 7.12.1 Proofpoint Insider Threat Management 7.14.3	25

Common Weakness Enumeration (CWE)

CWE-754 - Improper Check for Unusual or Exceptional Conditions

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References