CVE-2023-35998

Published Jun 27, 2023

Last updated a year ago

CVSS medium 4.6

Overview

Description: A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on an adjacent network to read and write unauthorized objects. Successful exploitation requires an attacker to first obtain a valid agent authentication token. All versions before 7.14.3 are affected.
Source: security@proofpoint.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 4.6
Impact score: 2.5
Exploitability score: 2.1
Vector string: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Severity: MEDIUM

Weaknesses

nvd@nist.gov: CWE-862
security@proofpoint.com: CWE-862

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:proofpoint:insider_threat_management_server:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "255D6928-4B04-45AB-933C-C8E7557AB56D",
            "versionEndExcluding": "7.14.3"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References