What is CVE-2020-10655?

CVE-2020-10655 is a critical-severity vulnerability in Proofpoint Insider Threat Management Server, classified under Deserialization of Untrusted Data. CVSS score: 9.8/10. Published 2021-01-06.

How severe is CVE-2020-10655?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Deserialization in Proofpoint Insider Threat Management Server

CVE-2020-10655

The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteWindowMouse API. The vulnerability allows an anonymous remote attacker to execute arbitrary code with local administrator privileges. The vulnerability is caused by improper deserialization.

Vulnerability class: Insecure Deserialization

EPSS: 0.026 (83.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Proofpoint Insider_threat_management_server
N/a — versions n/a

Weakness classification (CWE)

CWE-502 — Deserialization of Untrusted Data

References

cve@mitre.org (Product, x_refsource_MISC)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-10655?: CVE-2020-10655 is a critical-severity vulnerability in Proofpoint Insider Threat Management Server, classified under Deserialization of Untrusted Data. CVSS score: 9.8/10. Published 2021-01-06.
How severe is CVE-2020-10655?: Critical severity. CVSS v3 base score is 9.8 out of 10.