What is CVE-2023-36002?

CVE-2023-36002 is a medium-severity vulnerability in Proofpoint Insider Threat Management, classified under Missing Authorization. CVSS score: 4.3/10. Published 2023-06-27.

How severe is CVE-2023-36002?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Auth bypass in Proofpoint Insider Threat Management

CVE-2023-36002

A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to smuggle content via DNS lookups. All versions before 7.14.3 are affected.

Vulnerability class: Broken Access Control

EPSS: 0.003 (16.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Proofpoint Insider Threat Management — versions 0
Proofpoint Insider_threat_management_server

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

security@proofpoint.com (Not Applicable)
nvd@nist.gov (Vendor Advisory)

Frequently asked questions

What is CVE-2023-36002?: CVE-2023-36002 is a medium-severity vulnerability in Proofpoint Insider Threat Management, classified under Missing Authorization. CVSS score: 4.3/10. Published 2023-06-27.
How severe is CVE-2023-36002?: Medium severity. CVSS v3 base score is 4.3 out of 10.