CVE-2021-27899

Name of the Vulnerable Software and Affected Versions: Proofpoint Insider Threat Management Agents versions prior to 7.11.1

Description: The issue allows a remote attacker to intercept and alter communications between the Proofpoint Insider Threat Management Agents and the ITM Server using a man-in-the-middle attack, due to improper validation of the ITM Server's certificate.

Recommendations: For versions prior to 7.11.1, update to version 7.11.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the ITM Server to minimize the risk of exploitation.