What is CVE-2020-8884?

CVE-2020-8884 is a high-severity vulnerability in Proofpoint Insider Threat Management, classified under Deserialization of Untrusted Data. CVSS score: 8.8/10. Published 2021-01-06.

How severe is CVE-2020-8884?

High severity. CVSS v3 base score is 8.8 out of 10.

Deserialization in Proofpoint Insider Threat Management

CVE-2020-8884

rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT Windows Agent) before 7.9 allows remote authenticated users to execute arbitrary code as SYSTEM because of improper deserialization over named pipes.

Vulnerability class: Insecure Deserialization

EPSS: 0.041 (89.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Proofpoint Insider_threat_management
N/a — versions n/a

Weakness classification (CWE)

CWE-502 — Deserialization of Untrusted Data

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-8884?: CVE-2020-8884 is a high-severity vulnerability in Proofpoint Insider Threat Management, classified under Deserialization of Untrusted Data. CVSS score: 8.8/10. Published 2021-01-06.
How severe is CVE-2020-8884?: High severity. CVSS v3 base score is 8.8 out of 10.