CVE-2023-35998

Published Jun 27, 2023

Last updated 3 months ago

CVSS medium 4.6

Overview

Description: A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on an adjacent network to read and write unauthorized objects. Successful exploitation requires an attacker to first obtain a valid agent authentication token. All versions before 7.14.3 are affected.
Source: security@proofpoint.com
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 4.6
Impact score: 2.5
Exploitability score: 2.1
Vector string: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Severity: MEDIUM

Weaknesses

security@proofpoint.com: CWE-862
nvd@nist.gov: CWE-862

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:proofpoint:insider_threat_management_server:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "255D6928-4B04-45AB-933C-C8E7557AB56D",
            "versionEndExcluding": "7.14.3"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References