Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint Insider Threat Management (formerly ObserveIT) Agent for Windows before 7.4.3, 7.5.4, 7.6.5, 7.7.5, 7.8.4, 7.9.3, 7.10.2, and 7.11.0.25 as well as versions 7.3 and earlier is missing authentication for a critical function, which allows a local authenticated Windows user to run arbitrary commands with the privileges of the Windows SYSTEM user. Agents for MacOS, Linux, and ITM Cloud are not affected.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Proofpoint Insider Threat Management Server 安全漏洞
Vulnerability Description
Proofpoint Insider Threat Management Server是美国Proofpoint公司的一款应用于防止企业内部人员恶意操作的服务端应用。 Insider Threat Management Windows Agent Local Privilege Escalation存在安全漏洞，该漏洞源于程序缺少认证的重要功能,它允许一个本地身份验证的Windows用户运行任意命令与Windows系统的用户的特权。以下产品或版本存在此漏洞：Windows 7.4.3之前,Windows
CVSS Information
N/A
Vulnerability Type
N/A