Arbitrary Code Execution in Proofpoint Insider Threat Management Server
CVE-2020-10657

7.2HIGH

Key Information:

Vendor

Proofpoint

Status
Insider Threat Management Server
Vendor
CVE Published:
6 January 2021

What is CVE-2020-10657?

The Proofpoint Insider Threat Management Server, previously known as the ObserveIT Server, has a vulnerability in its ITM web console's ImportAlertRules feature. This flaw permits a remote attacker with admin or config-admin privileges to execute arbitrary code with local administrator rights. This vulnerability stems from improper deserialization, posing a significant risk to system integrity and data security.

References

https://www.proofpoint.com/us/blog
x_refsource_MISC
https://www.proofpoint.com/us/security/security-advisorie...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.