CVE-2023-4801

Published: Sep 13, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.6 / Impact: 5.9

Source: NVD

Description

An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent network to establish a man-in-the-middle position between the agent and the ITM server after the agent has registered. All versions prior to 7.14.3.69 are affected. Agents for Windows, Linux, and Cloud are unaffected.

Affected (1)

Products: Proofpoint: Insider Threat Management

1 product

Insider Threat Management

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Proofpoint Insider Threat Management	Before 7.14.3.69

Related CWEs

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (3)

https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-006

Source: security@proofpoint.com

Broken Link

https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-0006

Source: nvd@nist.gov

Vendor Advisory

https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-006

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

Timeline

No history available yet.