CVE-2023-36000
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
A missing authorization check in the MacOS agent configuration endpoint of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to obtain sensitive information. Successful exploitation requires an attacker to first obtain a valid agent authentication token.
Risk Assessment
The organization is exposed to the risk of sensitive data leakage, which can lead to serious legal and reputational consequences. An attacker from an adjacent network can gain unauthorized access to information.
Recommendation
It is recommended to upgrade to version 7.14.3 or later to mitigate this vulnerability. Additionally, implementing further security measures such as monitoring and restricting access to configuration endpoints is advisable.
Original NVD description (English source)
A missing authorization check in the MacOS agent configuration endpoint of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to obtain sensitive information. Successful exploitation requires an attacker to first obtain a valid agent authentication token. All versions before 7.14.3 are affected.