Authentication Bypass in Insider Threat Management Server from Proofpoint

CVE-2025-8558

What is CVE-2025-8558?

The Insider Threat Management Server from Proofpoint has a vulnerability that allows unauthenticated users on an adjacent network to bypass authentication. This exploitation enables malicious actors to unregister agents when the number of registered agents exceeds the licensed limit. This results in a denial of service, preventing the server from processing new events from those affected agents, leading to a significant compromise of the system's integrity and availability while confidentiality remains intact.

References