CVE-2023-2818

Published: Jun 27, 2023Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

An insecure filesystem permission in the Insider Threat Management Agent for Windows enables local unprivileged users to disrupt agent monitoring. All versions prior to 7.14.3 are affected. Agents for MacOS and Linux and Cloud are unaffected.

Affected (1)

Products: Proofpoint: Insider Threat Management

Proofpoint

1 product

Insider Threat Management

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Proofpoint Insider Threat Management	Before 7.14.3

Related CWEs

CWE-281

Improper Preservation of Permissions

The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

References (2)

https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-005

Source: security@proofpoint.com

Vendor Advisory

https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-005

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.